Average Reviews:
(More customer reviews)Are you looking to buy Securing SCADA Systems? Here is the right place to find the great deals. we can offer discounts of up to 90% on Securing SCADA Systems. Check out the link below:
>> Click Here to See Compare Prices and Get the Best Offers
Securing SCADA Systems ReviewSupervisory Control And Data Acquisition (SCADA) is one of the most important control system architecture in the Infrastructure intensive world post the second world war. Nations and businesses all rely on SCADA systems to manage vast infrastructure from electrical systems (generation, transmission and distribution) to water infrastructure and the energy industry. The central role of SCADA systems which combine modern Information and Communication Systems (ICT) with dated relay systems in the control of infrastructure makes them logical targets in a world of cyber-warfare, cyber-espionage and , with increasing potentials for coordinate cyber terrorism.As we have come to know, with increasing fervor in recent times, our information system is far from being secure. All modern commercial operating systems from Windows based OSs to Unix based systems (including Apple Mac and all Linux variants) are not immune from concerted bug-searching efforts nor are they immune from exploits by resourceful and single-minded attackers. While computer vendors continue to make giant strides to apply sound coding methods and practices to improve the quality and reduce attack surfaces of their off-the-shelve products, the computer "hackers" continue to wield the upper hand. Unfortunately, telecommunication networks as well as SCADA systems, in an effort to standardize platforms are adopting variants of commercial-off-the shelve operating systems; and even when these systems run on proprietory or special purpose platforms, their value to cyber-criminals and their ilks still make them attractive targets for subversion and attack.
Securing SCADA systems in light of their importance and consequence of exploits is a great necessity. Compromised SCADA systems could lead to unmanageable power outage, energy flow disruption, provide dangerous state secret to competing or enemy states; or in the hands of terrorist could facilitate a massive casualty attack. Since nuclear energy facilities are also fitted with SCADA systems, the impact of a compromised nuclear system SCADA system is yet to be fully comprehended. Also, the growing reliance on full network integration, and cohabitation of various platforms and systems makes the task of securing SCADA systems more onerous but essential. Securing SCADA Systems
The book, Security SCADA Systems by Ronald Krutz and published by provides a reasonably effective first step framework for securing SCADA systems. The book introduces SCADA in accessible term, describing essential components of most SCADA systems (SCADA architectural components including operator, human-machine interface, master terminal unit, communication, remote terminal unit; and the SCADA client-server architecture); basic SCADA definitions and applications; SCADA security issues (as the author sees them) and the role of SCADA systems in what the author determined as critical infrastructure; energy, utility and other control systems.
The just over 200 pages book is organized into eight chapters and three appendices with an index. The first chapter describes the essentials of SCADA systems from 30,000 feet, with a quick review of the origin, evolution and basic SCADA definitions, SCADA architecture and applications, Divergence of SCADA and IT and the relevance of conventional IT Security paradigm in SCADA systems and the essential value of redundancy and criticality of time in SCADA systems. Chapter two discusses SCADA systems in critical infrastructure including in the petroleum industry, nuclear power generation, 'conventional electric power generation, water purification systems, chemical plants and the need for securing the SCADA systems in these industries. Chapter three discusses the evolution of SCADA protocols, addressing the similarities and dissimilarities between the various SCADA protocols including the MODBUS Model, DNP3, UCA 2.0 and Controller Area Network. The chapter also discusses DeviceNet, ControlNet,EtherNet/IP, Profibus and FFB as well as the security implications of these disparate protocols and their ramification for standard TCP/IP based network security including firewall, demilitarized zone and VPN.
In Chapter four, the author discusses SCADA vulnerabilities and attacks surface looking at risk management for SCADA networks and systems, attack routes and deployment of SCADA HoneyNet. The author proceeds to describe his bias of security techniques and methods including intrusion based systems, security awareness programs and audit logs in chapter five and in chapter six describes some common security standards and reference documents in quite broad terms. The author used the last two chapters to bloviate on implementation guidelines and deliver a dire outlook of SCADA security today (2006).
The book is an easy and accessible read and provides a broad look on SCADA security, helping to fill some yawning gap in SCADA security literature, but falls grossly short of its title as it does not provide enough actionable program for securing SCADA systems, which may be far more difficult to do, given the widely disparate nature of SCADA systems, the lack of TCP/IP like all encompassing network architecture or the omnipresence like dominance of a single OS vendor which often make comprehensive programs easier to compile.
However, given the importance of SCADA systems, the book is a useful read, and a good first step.
http://woleakpose.orgSecuring SCADA Systems Overview
Want to learn more information about Securing SCADA Systems?
>> Click Here to See All Customer Reviews & Ratings Now
0 comments:
Post a Comment