News & Events.
WEBINAR RECORDING ADDED: Security Vulnerabilities: Stay One Step Ahead
June 14, 2011
One of the unexpected outcomes of STUXNET is the extent to which it has aroused the “security researcher” community and has turned their attention from commercial IT products to industrial automation and control systems. While their motives vary, from seeking recognition and monetary gain to intending to cause harm, the end result is that there are suddenly a lot of very smart people actively looking to find and exploit vulnerabilities in industrial control system products. And, not surprisingly, they are having a lot of success in this relatively “untapped” market. Most researchers disclose their findings responsibly by notifying the manufacturers and other authorities, but not reporting the information publicly. However, others opt for full disclosure and immediately publish or even sell their exploits.
Arguably, this attention to security vulnerabilities in control system products is good for the industry and will result in overdue improvements in security assurance. However, this trend is also potentially very dangerous as the market is currently ill equipped to manage the threat posed by the prolific publication of security vulnerabilities and corresponding exploit code.
Join us for an informational webinar that explores strategies that automation system suppliers can employ to improve the inherent security of their products while also staying one step ahead of the researchers who aim to expose their flaws. These strategies can also be useful in preparing to react to vulnerabilities found either internally and externally. We will also discuss suggestions for how end-users can enhance the security of their installed systems and respond to news of vulnerabilities found in the products they use.