TRITON: Ralph Langner & Zach Tudor Thoughts at the S4x18 Closing Panel скачать в хорошем качестве

TRITON: Ralph Langner & Zach Tudor Thoughts at the S4x18 Closing Panel

15-minutes discussion on the S4x18 Closing Panel on TRITON. Kudos for Schneider Electric on their analysis and disclosure, especially vis-a-vis Siemens/Stuxnet Are they really that talented? Do they really have unlimited resources and skills? They failed and failure on a safety or protection system could have dire consequences. A highly skilled attacker would make sure their solution worked as designed before launching it at a safety or protection system. Why didn't the asset owner protect the engineering workstation? Application whitelisting? We still don't know how the attacker got in? It will be easy for the asset owner to know what the attacker was trying to do by identifying what safety controller that was attacked was designed to do. They typically have a very limited purpose.