SCADA Systems a Target for Hackers?

superstick58 writes "As a system integrator, I am often providing control solutions that utilize sophisticated Ethernet networks and as they say in the biz 'link top floor to shop floor.' Forbes has an article about the security issues that exist in SCADA systems. When I look back at some of the systems I have put in which include direct I/O control over ethernet and distributed HMI monitoring, if I can get access from the internet, it would be easy to bring down power for a plant or at the very least make operators in the building very uncomfortable. How vulnerable are the manufacturing centers of the world?"

Comments

IBM/ISS has security services for SCADA

[yorugua]

http://www.iss.net/solutions/regulatory_complian ce/scada_programs.html

warning: marketing speech ahead..!!

Solution Packages for SCADA Security Compliance

SCADA Quick Start Program

The ISS SCADA Quick Start Program results in a thorough understanding of best security practices for your organization, and the development of detailed project plans for meeting the requirements.

Moderators:

Members of ISS X-Force Professional Services; A worldwide, elite team of security professionals, specializing in ISS adaptive network security tools and methodologies, as well as distributed computing system and network security.

Benefits to Participants:

* Access to industry-leading knowledge about best security practices for SCADA systems, and risk assessment methodologies, based upon research by the ISS X-Force Intelligence team; ISS' leading group of over 40 security experts, dedicated to proactive counter-intelligence, research, development and public education against online threats.

* Rapid availability of customized implementation documentation that organizations can begin to use immediately, including a tailored project charter document, SCADA compliance road map and detailed project plan for implementing SCADA Security Standards in their organizations.

* Save months of research time by utilizing security experts who have market leading risk management and industry-best practices expertise.

Program Details:

* 2 Days of Training - SCADA Security Standards and Introduction to Security Management

* 2 Day SCADA Strategy Workshop

* 1 Day Risk Assessment Consultation

* Free 60-day trial of the ISS X-Force Threat Analysis Service

* Free Technology Best Practices Configuration Guide