Wednesday, April 27, 2011
“The idea here is not only to fool the operators in the control room. It actually is much more dangerous and aggressive. The idea here is to circumvent a digital safety system…. when they are compromised, then real bad things can happen. Your plant can blow up and and neither your operators nor your safety system will notice it. That’s scary. But it gets worse – and this is very important, what I am going to say. Think about this: this attack is generic. It doesn’t have anything to do with specifics with centrifuges, with uranium enrichment. So it would work as well, for example in a power plant or in an automobile factory. It is generic. And as an attacker you don’t have to deliver this payload by a USB stick, as we saw it in the case of Stuxnet. You could also use conventional worm technology for spreading. Just spread it as wide as possible. And if you do that, what you end up with is a cyberweapon of mass destruction".'
Posted by DotConnector at 10:04