1

I'm interested on kind of attacks which can be used on 'Industry Control Systems'.

I only have found that following malwares:

  • switching-off/disablement the systems
  • stole the information

What else consequences can be occurred?

Steve
  • 15,155
  • 3
  • 37
  • 66
davs
  • 113
  • 4
  • Not directly related to your question, but one more issue is that many of these installations have relatively poor security measures - like default passwords, etc. and rely mainly one physical disconnection from other networks or security by obscurity (another explanation is that they are of the 'radar' of security personnel who traditionally target conventional IT systems) – Ophir Yoktan Mar 22 '11 at 07:23

2 Answers2

6

I think you really need to rethink the question, however to answer what I think you are asking (what effects can an attack on SCADA systems have) then the list would have to include:

  • Switching off Power
  • Information theft
  • Destruction of power plants (through overload, oscillation, over-pressure, disabling of safety cutouts etc - see the generator destruction video IOActive showed at Defcon)
  • Environmental damage (opening of oil pipelines, opening of hydroelectric valves incorrectly etc)
  • Processes running inefficiently (eg the effect Stuxnet had on centrifuges producing essential products for the nuclear industry)

Basically, anything that is controlled by a SCADA system is at risk - so it's kind of the same question as "what damage can an attack on an IT system do?" - it all depends on what the IT system does.

If you can clarify your question as per the FAQ, we could definitely give you more appropriate answers.

Update: Dozens of exploits released for SCADA systems. some more info for you.

Rory Alsop
  • 61,367
  • 12
  • 115
  • 320
  • Your answer is what I wanted to know! Thanks a lot! – davs Mar 20 '11 at 20:59
  • @davs - feel free to click the little tick icon on my answer. On stack exchange that works even better than thanks :-) – Rory Alsop Mar 20 '11 at 22:04
  • ♦ : Ok. Sorry.. I've forgot :( – davs Mar 20 '11 at 22:37
  • @davs - no worries. welcome to security se. The FAQ is useful to read, both because it helps people to answer questions appropriately, but also because it can help you to write questions to get better answers. – Rory Alsop Mar 20 '11 at 22:54
0

Seriuos economic problem for a country. Example the Siberian Gas Pipeline Explosion in 19821

Henry Raúl González Brito
  • 1
  • 1