Slashdot Mirror
Inside ICS-CERT's War Room
itwbennett writes "When Stuxnet first appeared in July 2010, the U.S. response was gathered at the ICS-CERT facilities at Idaho National Labs (INL). 'This is the classified building where phones will start ringing should the next Stuxnet show up, and home to staffers who specialize in IT and industrial systems,' said Robert McMillan, who was invited to attend a training exercise run by the U.S. Department of Homeland Security (DHS) and INL. 'It's small — there were just four analysts there on Thursday — but it looks like the security operations centers you see big companies such as Cisco and Symantec: people sitting in front of computers, with a big screen showing a real time feed of any situations that need to be handled.'"
From what I have read about Stuxnet, it was a global coordinated effort. The benefit to that level of diversity is the "out of the box" thinking is off the chart. You put similar people with similar backgrounds in the same room, and the hacking world will eat their lunch.
Flexible bare-metal recovery for Linux/UNIX
Why would DHS say "Hey buddy come check out our training methods and classified building and then you can write a story and tell everyone all about it"?
Pfffft. That screen is nothing compared to what you need just to handle development in Eclipse. Pansies.
Thanks for an informative post on âoe the topicâ. I was looking for the information and researching on it when I stumbled upon your post. Thanks again
Hey there, link spammer!
By default, all URL's on Slashdot have the attribute "rel=nofollow" meaning that web spiders won't follow the links for the purpose of ranking in search engines.
What it DOES do, however, is ensure that your spam URL www dot efortesolutions dot com makes its way into my DNS shitlist, never to be resolved by anyone inside my organisation again. Furthermore, you're supposed to replace " the topic" with the actual topic of the post. Way to go, douchebag!
Finally had enough. Come see us over at https://soylentnews.org/
Where were they at when the biggest virus to hit the internet - Windows 7 - was released? Sitting on their asses watching all the blinkenlights?
Because... sitting in front of computers, with a big screen showing a real time feed of any situations that need to be handled is a true indicator that things will get accomplished.
Gentlemen. You can't fight in here. This is the War Room!
Big screens are just management porn, its only for showing off to visitors and be taken pictures in front of.
We have the same in the SOC (Security Operation Center) where I work, and it's always fun watching politicians and other "prominent" people nodding their heads when our manager explains what the screens are showing. The fact is that we never ever use that information ourself, and all the real work is done one our own personal screens.
But it can be made to look impressive, and make sure the money flows our way... :)
Ha. Excellent work sir.
> When Stuxnet first appeared in July 2010, the U.S. response
The above sentence is, in and itself impossible, considering the anti-iran Stuxnet computer worm was developed on the libyan P-1 uranium centrifuge rig set, which the USA had shipped over to the zionists's Dimona facility, after Colonel Gadhafi made peace with the euro-atlantic "Free World" a few years ago. There can be no "response" per se, if you are one of the initiators, obviously.
Not too suprisingly, as soon as Stuxnet was activated and done its job on Iran, Colonel Gadhafi and the secret of his P-1 set's destination became redundant, thus a "popular revolution" was quickly created in Libya to depose and kill him... (About as much of a scam as the 1956 hungarian revolution was a CIA scam, to cover the back of the tri-partite invasion of Egypt, except the USSR politburo did not fell for that one.)