[Info-vax] OpenVMS versus Windows/GE Telemetry Control Systems.

[Paul Sture]

In article 
<04ea120b-b6a7-437b-973a-5001fd744d17 at hf3g2000vbb.googlegroups.com>,
 John Wallace <johnwallace4 at yahoo.co.uk> wrote:
> 
> Stuxnet was quietly working its way around Window boxes for a long
> while (maybe a year?) before it got serious attention. Ignorance is
> not necessarily bliss. If folks haven't yet looked into Stuxnet or its
> successors (eg Duqu), there's no time like the present, and the
> Wikipedia article on Stuxnet isn't a bad start, although for further
> reading I'd recommend Ralph Langner and maybe Symantec.

Two (unnamed) US power stations were hit recently and at one of them the 
cleanup "delayed a plant restart operation by about three weeks".

<http://www.theregister.co.uk/2013/01/16/us_power_plant_malware/>

SCADA gets a mention in the reported referenced there:

<http://www.us-cert.gov/control_systems/pdf/ICS-CERT_Monthly_Monitor_Oct-
Dec2012.pdf>

"ICS-CERT also performed preliminary onsite analysis of those machines 
and discovered signs of the sophisticated malware on two engineering 
workstations, both critical to the operation of the control environment. 
Detailed analysis was conducted as these workstations had no backups, 
and an ineffective or failed cleanup would have significantly impaired
their operations."

Ouch.

-- 
Paul Sture