Eclectic Security

A few words about scada.

SCADA stands for supervisory control and data acquisition. It generally refers to industrial control systems: computer systems that monitor and control industrial, infrastructure, or facility-based processes, as described below:
http://en.wikipedia.org/wiki/SCADA

SCADA vulnerabilities made again headlines last week, the security researcher Luigi Auriemma posted the results of 35 exploits afecting  SCADA systems made by Siemens, Iconics, 7-Technologies and DATAC. After the disclosure, Digital Bond and emergingthreatspro published a set of IDS signatures to be used with Snort and Suricata, along with thee signatures there’s also a set of PCAP files to test and trigger the Quickdraw Signatures. In the next few days I’m going to test this signatures using Smooth-Sec, I hope to give some good results and publish some interesting feedback. If anyone is interested in advanced SCADA security, I advise to take a look to the scada-honeynet.

Photo by: http://www.flickr.com/photos/kafreddy/