SCADA StrangeLove Kaspersky SAS 2014 - LHC

UNCOMMON ICS PROTOCOLS

*All pictures are taken from Dr StrangeLove movie and other Internets

SCADASTRANGELOVE.ORG

http://scadasl.org

Sergey Gordeychik

@scadasl

Group of security researchers focused on ICS/SCADA

to save Humanity from industrial disaster and to keep Purity Of Essence

Sergey Gordeychik Gleb Gritsai Denis BaranovRoman Ilin Ilya Karpov Sergey BobrovArtem Chaykin Yuriy Dyachenko Sergey DrozdovDmitry Efanov Yuri Goltsev Vladimir KochetkovAndrey Medov Sergey Scherbel Timur YunusovAlexander Zaitsev Dmitry Serebryannikov Dmitry NagibinDmitry Sklyarov Alexander Timorin Vyacheslav EgoshinRoman Ilin Alexander TlyapovEvgeny ErmakovKirill Nesterov

Find Similarities 

SIMATIC WinCC OA

Popular HMI

Relatively new system

Platform independent

Custom webserver

Apache bugs history

http://cvedetails.com for Apache HTTP Server

CVE-2014-16[96-99]

Please read RFC… Before GET / my webserver!

PS

Industrial Security?

http://2011.phdays.com/monolith.asp

THANK YOU!*All pictures are taken from Dr StrangeLove movie and other Internets

SCADASTRANGELOVE.ORG

http://scadasl.org