Inside Stuxnet
Written by Andrew Johnson   
Sunday, 11 March 2012

Ralph Langner has analyzed the Stuxnet virus and made a convincing argument that it was created to do a single job. The technical details are really interesting and not the sort of thing you will encounter in the usual news media.

 

stuxnetdeepdive

 

The conclusion is that Stuxnet was designed to attack the Natanz processing facility in Iran. There is no clue as to who created the code, however. One interesting observation is that there seems to be no way to create Stuxnet without a test facility, i.e. you need substantial resources to create such a virus.

 

If you would like to see a less technical but wider discussion of security for SCADA systems, here's one that appeared recently on 60 Minutes.

Computer virus's evident success in damaging Iran's nuclear facility has officials asking if our own infrastructure is safe. Steve Kroft reports.

 

 

 

 

It is sobering to note that Siemens still has not fixed the vulnerabilities in its SCADA control computers.

 

 

stuxnethardware

Siemens PCL unit with three I/O modules

 

Further Reading

Planes are Unix hosts waiting to be hacked

Cracking Stuxnet - a beginner's guide


blog comments powered by Disqus

 

To be informed about new articles on I Programmer, subscribe to the RSS feed, follow us on Google+, Twitter, Linkedin or Facebook or sign up for our weekly newsletter.

Banner


Matchstick - Firefox OS Rival To Chromecast
01/10/2014

Mozilla has just announced a competitor to Chromecast. The small USB device is ready and waiting for your apps - and they are giving them away to make it easier!



Time To Enter The Intel RealSense App Challenge
22/09/2014

With just days to go until October 1st, there is still time to come up with an idea for using the new Intel RealSense technology that could win you $50,000.


More News

Last Updated ( Sunday, 11 March 2012 )
 
 

   
RSS feed of news items only
I Programmer News
Copyright © 2014 i-programmer.info. All Rights Reserved.
Joomla! is Free Software released under the GNU/GPL License.