NARI protective relays bugs

On recent "OMG - relay protection is hacked".

Hopeless: Relay Protection for Substation Automation

If you need more details on Practical analysis of the cybersecurity of European smart grids, we have a  small present for all Digital Substations, IEC 61850 and Remote Code Execution lovers by Kirill Nesterov @k_v_nesterov and Alexander Tlypov @_Rigmar_


Digital Substation is an essential part of every electrical network. It is also a base ground for modern Smart Grid technologies. More than 4000 of IEC 61850 compatible substations operated in Europe, 20 000+ worldwide, each of the comprising communication and flow of gigawatts of electrical current between large power plants (thermoelectrical, hydroelectrical or even nuclear) and their respective consumers. Such consumers include cities, industrial objects and power plants themselves.

Railway hacking at Catalonia

Famous "The Great Train Robbery: Fast and Furious" show as presented  @OverDrive Hacking Conference in Girona, Catalonia by Sergey Sidorov.

Enjoy!

It's time to tell a story

SCADA StrangeLove timeline as delivered by Aleksander Timorin at Overdrive conference,  Spain.

Enjoy

Greater China Cyber Threat Landscape

As presented on China Internet Security Conference (ISC 2016, http://isc.360.cn/2016/en/index.html)

Choo-Shoo pwn explained

...A detailed analysis of the security status of widely-used ICS/Scada systems, including railway and interlocking CBCS, has identified faults and vulnerabilities, which allow cyber criminals to not only degrade key reliability parameters and bypass safety mechanisms, but also to carry out attacks which directly affect rail traffic safety. Remarkably, these systems meet all of the relevant IT security and functional safety requirements and all have the required international, national and industrial certificates...

Friends don't let friends put SCADA on the Internet. At least tried...

220,558 Internet-connected ICS components worldwide

188,019 unique hosts (IP addresses)

170 countries (~82% of all)

HTTP is still most widespread industrial protocol

50,3% HTTP

13,4% Telnet

9,3% Niagara Fox

7,6% SNMP

7,4% Modbus