www.tomsguide.com – “How to Hack Into a
City's Power Grid” – February 28th, 2014:
Employees are the weakest link when securing industrial control systems that run power plants, municipal water supplies, electric grids and other pieces of critical infrastructure, a professional hacker said at the RSA conference here in San Francisco.
"The objective is simple — to gain access," Andrew Whitaker, director of the Cyber Attack Penetration Division at the Reston, Va.-based Knowledge Consulting Group, told the audience of information-technology professionals. "We target SCADA engineers. You know how to get into industrial control systems."
“Then we need physical access,” Whitaker said. “We’ll hop fences or figure out ways to walk into buildings”
It’s also quite easy to create a fake corporate badge, Whitaker explained – and then “tailgate” a group of legitimate employees who will glance at the badge and let the wearer in. “Thanks to all the smokers out there,” he joked, “for leaving doors unlocked” and not looking too hard at a new employee who seems to cough a lot when he smokes.
Employees are the weakest link when securing industrial control systems that run power plants, municipal water supplies, electric grids and other pieces of critical infrastructure, a professional hacker said at the RSA conference here in San Francisco.
"The objective is simple — to gain access," Andrew Whitaker, director of the Cyber Attack Penetration Division at the Reston, Va.-based Knowledge Consulting Group, told the audience of information-technology professionals. "We target SCADA engineers. You know how to get into industrial control systems."
“Then we need physical access,” Whitaker said. “We’ll hop fences or figure out ways to walk into buildings”
It’s also quite easy to create a fake corporate badge, Whitaker explained – and then “tailgate” a group of legitimate employees who will glance at the badge and let the wearer in. “Thanks to all the smokers out there,” he joked, “for leaving doors unlocked” and not looking too hard at a new employee who seems to cough a lot when he smokes.