Skip to main content

What You Always Wanted and Now Can: Hacking Chemical Processes at #HITB2015AMS

posted onMay 23, 2015
by l33tdawg

Security is an applied science. Security properties and secure design are only valid in the context of a particular application or environment. Similarly, hacking techniques and tools are only useful for exploiting specific types of vulnerabilities.

In a surprising number of works on SCADA hacking, researchers and hackers ignore the actual physical process–“I hacked into the control system so I won!” is their thinking. The truth is, breaking into a system is not the same as breaking a system. The damage caused by an attack will be limited if the attacker is unable to manipulate the control system in such a way as to achieve the desired outcome in the physical world. Ignoring the process means missing the specific and most interesting steps of SCADA hacking.

This talk from Jason and Marina will explain the role and importance of knowledge about physical processes and control system principles in designing full-fledged SCADA exploits. They will also discuss the challenges and uncertainties of process exploitation and mitigation opportunities for defenders.

http://conference.hitb.org/hitbsecconf2015ams/sessions/hacking-chemical-processes/

Source

Tags

Security HITB HITB2015AMS

You May Also Like

Recent News

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Friday, June 7th

Thursday, June 6th