Researcher Offers New Perspective On Stuxnet-Wielding Sabotage Program

An anonymous reader writes with this excerpt from Help Net Security: "Stuxnet, the malware that rocket the security world and the first recorded cyber weapon, has an older and more complex 'sibling' that was also aimed at disrupting the functioning of Iran's uranium enrichment facility at Natanz, but whose modus operandi was different. The claim was made by well-known German control system security expert and consultant Ralph Langner, who has been analyzing Stuxnet since the moment its existence was first discovered. He pointed out that in order to known how to secure industrial control systems, we need to know what actually happened, and in order to do that, we need to understand all the layers of the attack (IT, ICS, and physical), and be acquainted with the actual situation of all these layers as they were at the time of the attack."

Comments

Rocket the security world?

[digitalPhant0m]

Stuxnet, the malware that rocket

I didn't know it was airborne.

Re: Interesting quote

[semi-extrinsic]

Well, what would you say high yield is? I can't bring myself to call a US cyber weapon "high yield" unless it destroys or disables infrastructure on a large cale. Bonus points for egg on faces in Riyadh.

The reason it has gotten so much attention is the same reason the F117 got a huge amount of press even though it's practically useless.

We dont' need to know everything

[jbmartin6]

in order to known how to secure industrial control systems, we need to know what actually happened

False, we don't need to know everything bad that ever happened in order to secure a system.