Reading the ICS-CERT security alerts on a daily basis can make you despair, even though most of the vulnerabilities and attacks in and on industrial systems aren't actually world-shattering. However, a few of them do stand out - for example when the target is in use extremely often or the vulnerability is fairly easy to exploit.
The requirements for Programmable Logic Controllers are increasing continuously, and today's PLCs don't have much in common with their predecessors of a few years ago. The higher complexity brings potential risks that have to be fought off with even more new functions. With the newest member of the S7 family, Siemens tries to bring it all together.
While there seem to be industrial automation applications where the »Windows« operating system is considered useful, there are downsides to implementing desktop operating systems in critical applications. Apart from safety and security considerations, the very Windows-specific question of 32 or 64 Bit is coming up now in those applications as well.
The European programmable logic controllers (PLC) market witnessed a heavy decline in growth in 2009, owing to the recession of 2008. However, it made a strong recovery in 2010 with all major market participants in Europe experiencing high growth. A new Frost&Sullivan study anticipates continued moderate growth, under some conditions.
Industrial automation systems can be quite versatile - take them out of the factory and beside a rail track and even Britain’s or Germany’s infamous trains might run like an oiled automation line. In order to prove this hypothesis, a transportation company and an automation expert join forces.
A week ago, security researcher Rubén Santamarta publicly announced details of multiple vulnerabilities affecting the Schneider Electric Quantum PLC Ethernet Module, and coordinated his findings with ICS-CERT. The Quantum Ethernet Module is prone to an authentication-bypass vulnerability.
Strangely enough, many serious studies indicate that industrial networks seem to be easier to penetrate than »consumer« networks. Just try scanning the Wifi networks in or around the factory of your choice with your iPhone and log in with »1234« »autumn« or »password«. It works frighteningly often.
»Why don’t you write about Stuxnet?« – »Stuxnet is a must in an automation blog!« Well… sometimes even I should take advice from readers. In this case, however, I’m not sure if I really should, at least not at the moment. Why?
Recent Comments