SCADAStrangeLoveResearchTeamWWW.SCADA.SLurityresearchersfocusedonAlexanderTimorinDmitrySerebryannikovSergeyDrozdovAlexanderTlyapovDmitrySklyarovSergeyGordeychikAlexanderZaitsevEvgenyErmakovSergeySidorovAlexeyOsipovGlebGritsaiSergeyScherbelAndreyMedovIlyaKarpovTimurYunusovArtemChaykinIvanPoliyanchukValentinShilnenkovDenisBaranovKirillNesterovVladimirKochetkovDmitryEfanovRomanIlinVyacheslavEgoshinDmitryNagibinRomanPolushinSergeyBobrovYuriGoltsevYuriyDyachenkotosaveHumanityfromindustrialdisasterndtokeepPurityOfEssenceCYBERSECURITY?FunctionalSafetyFunctionalSafetyandReliabilitySafetyInformationSecurityalentinGpanovichEfimRozenbergSergeyGordeychikRailwayStrategiesIssuelishingltddocsrailwaystrategiesissuejuneATSATS/story/four-cyber-attacks-on-uk-railways-in-a-year-10498558/technology/2016/jan/07/ukrainian-blackout-hackers-attacked-media-company32C3,Hamburg,TheGreatTrainCyberRobberyONLINE,042INENTERPRISES/analysis/publications/75343/industrial-cybersecurity-threat-landscape/httpplcscanorgblog3/census-scanning-from-siemens-s7-plc-cpustatus/TERCHINA0OF“SMART”POWERGRIDOBJECTS?GREENENERGY?SMARTGRID?DIGITALSUBSTATIONSS?19,000KMOFHIGH-SPEEDLINES?HIGHLYAUTOMATED?NATIONALHIGH-SPEEDRAILGRID(4+4)DIGITALSUBSTATIONTAKEOVERLENGEwwwphdayscompressnewsDIGITALSUBSTATIONTAKEOVERGOALS?FINDVULNERABILITIESINIEC-61850SUBSTATIONS?CREATEEXPLOIT?TRIGGERCYBER-PHISICALATTACKwwwphdayscompressnewsVULNERABILITIESINRELAYPROTECTIONOTECODEEXECUTION?togetfirmware??togetdebugsymbols??todebug??no“operationsystem”CONFIRMATIONCODE“311299”Toaccessthisinformation,theconfirmationcode“311299”needstobeprovidedwhenprompted."shofficialdocumentationonthesecsItisstronglyrecommendedtoworktogetherwithSiemensSIPROTECcustomercareorcommissioningexpertstoretrieveandinterpretthestatisticsandtestinformation..."ICEMEMORYhttpscadastrangeloveblogspotcom15/12/now-declared-capabilities.htmlEVxWorks6.xketkvNesterovsamincubeRAILWAYCOMPUTERBASEDINTERLOCKINGRAILWAYGSM-RISSUESVULNERABILITIESOF(U)SIM?Remotedatarecovery(Kc,TIMSI)–Chaneldecryption(includingA5/3)–?Clone?theSIMandmobilestation?SIM“malware”?BlockSIMviaPIN/PUKbrute?ExtendedOTAfeatures(FOTA)KarstenNohl,https://srlabs.de/rooting-sim-cards/AlexanderZaitsev,SergeyGordeychik,AlexeyOsipov,PacSec,Tokyo,Japan,2014FunctionalSafetyFunctionalSafetyandReliabilitySafetyInformationSecurityalentinGpanovichEfimRozenbergSergeyGordeychikRailwayStrategiesIssuelishingltddocsrailwaystrategiesissuejuneMISSIONCENTRICAPPROACHIndustrialsafety:directlyaffectphysicalsafety.Economical:decreaserailroadtrafficcapacityorotherquantitativeeconomicalcharacteristics(traindelays,localpoweroutage)Reliabilityandfunctionalsafetyimpact:ICScrashes,outofservice,etc.COMPUTERBASEDINTERLOCKING12FORMALREQUIREMENTSATMODELrPhysicalThreats?setalessrestrictivesignallight?operateaswitchwithatrainpassingoverit?setconflictingroutes…2.Economics(freightefficiency)?CBICPUcrashReliabilityandfunctionalsafety?CBICPUrebootersecuritytheneedforamissioncentricapproachValentinGapanovichEfimRozenbergandSergeyGordeychiksignallingsignallingcybersecuritytheneedforamissioncentricapproachhtmlOITTOGETHER?GOVERNMENT?SECURITYVENDORS?OPERATORSOFCRITICALINFRASTRUCTURESOSQ:WTFSACADSOS?A:SCADASOS-(un)SecureOpenSmartGridsisopeninitiativetoriseawarenessoninsecuritiesofSmartGrid,PhotovoltaicPowerStationsandWindFarms.Q