Codifying the Process: Outsiders Gain Insider Advantage


I was at Black Hat 2017 last week and was impressed with the Industroyer /Crashoverride: Zero Things Cool About a Threat Targeting the Power Grid  presentation by ESET and Dragos Security. The teams outlined well how the attack was executed. One of the big takeaways was that attackers did not exploit a vulnerability or zero day to bring down Ukrainian power. Robert Lee from Dragos Security put it well when he said that the attackers took the time to codify the process on which the plant is run. They exposed security by obscurity as a weak security control by becoming sufficiently expert in bulk electric systems.

This is a chilling. Crashoverride is scary enough because it is a highly sophisticated, modular piece of malware seemingly built to take on grids across Europe. According to Dragos, it could have a broader reach with only a day’s worth of modification to adapt it to the U.S. grid. These are significant developments, but the fact that there is nothing to patch to prevent future attacks means the process itself is in an odd way the real vulnerability. How do you remediate the process?

The insider threat has been a threat for decades. A determined insider can certainly do damage armed with tribal knowledge and ill will. Now, that insider knowledge is in the wild and outsiders have shown they can cause similar outcomes. If bulk electric power is susceptible, what about oil & gas, chemical, and other critical infrastructure industries? Are they the next target for process codification attacks?


Share this post


Comments

Comments
Ophthalmic Drops PCD Franchise Company in India
Get WHO GMP Range of Ophthalmic Drops PCD Franchise Company in India - PharmaFlair provides Business Info & Verified Contact detail of Pharma Ophthalmic Medicine PCD Franchise Companies in India. Discover 2000+ DCGI GMP Ophthalmic & Eye Drops range at best Price in India.
6/7/2021 11:57:29 AM
 
Pharma Franchise in Neuropsychiatry Medicine Segment
Searching for best Pharma Franchise Company deals in Neuro Segment. No worry we have got you covered. We, PharmaFlair are most Trusted B2B Pharma Marketplace that gas more than 1000 Pharma Companies listed for PCD Franchise across Medicinal Segments Including Neuro, Cardiac, Ophthalmic, gynecology, Pediatric, orthopedic, Analgesics, Antibiotics, Derma & more. Visit PharmaFlair & Connect with ISO certified companies provides Pharma Franchise in Neuropsychiatry Medicine Segment on monopoly basis in India.
6/7/2021 11:54:15 AM