On Mon, Jan 17, 2011 at 6:34 AM, Xiaofan Chen <xiaofanc@gmail.com> wrote:

> I think the security problem is more real now that Ethernet is
> everywhere and the industrial control system may well be
> connected to the enterprise level ERP systems.
>
> Whether it is a PLC system or DCS or other industrial control system,
> once they are connected to the web, then there are potential
> security risks, just like other web connected systems.
>

Mind you the Stuxnet was also spreading via USB disks. So even if you had a=
n
'unplugged' machine for controlling your machinery, if you regularly plug a
USB disk into that machine, you are in danger. Think it is more as a
traditional trojan/virus rather than a more common SpyWare or Worm.

Stuxnet was also a targeted attack, and the attacker must have known a load=
s
of details about the target. Whoever wrote it, that did not happen in one
day -- very complex stuff.

Tamas



>
>
> --
> Xiaofan
>
> --
> http://www.piclist.com PIC/SX FAQ & list archive
> View/change your membership options at
> http://mailman.mit.edu/mailman/listinfo/piclist
>



--=20
int main() { char *a,*s,*q; printf(s=3D"int main() { char *a,*s,*q;
printf(s=3D%s%s%s, q=3D%s%s%s%s,s,q,q,a=3D%s%s%s%s,q,q,q,a,a,q); }",
q=3D"\"",s,q,q,a=3D"\\",q,q,q,a,a,q); }
--=20
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist
.