Out of Control: Demonstrating SCADA Device Exploitation

Presented at Black Hat USA 2013, Aug. 1, 2013, 2:15 p.m. (60 minutes)

America's next great oil and gas boom is here: the United States is on track to become the world's top oil producer by 2020. New wells require new pipelines to distribute their bounty. These oil and gas pipelines crisscross the country carrying volatile fluids through densely populated areas. What runs these pipelines? How are they controlled? What happens when the process goes out of control?


Presenters:

  • Brian Meixell - Cimation
    Brian works for Cimation on the ICS/SCADA security team helping operators develop and implement secure network architectures with a focus on process control networks. He has conducted many vulnerability assessments and penetration tests for large control system networks. In the past, Brian has tested security products including network IPS, IDS, AV, whitelisting, and firewalls. Brian has a background in computer engineering, forensics, and reverse engineering.
  • Eric Forner - Cimation
    Eric works for Cimation as an ICS/SCADA Engineer, specializing in ICS Cyber Security, who has experience with various technologies in Process Controls, Building Automation, and Enterprise IT. Eric also has experience with low-level computer languages (x86 Assembly), plant floor networking, SCADA/DCS security, and vulnerability research. More specifically, Eric has focused on Siemens PCS7, Allen Bradley ControlLogix, Emerson ROC, and a variety of OPC servers/clients. Eric has performed work for some of the largest oil and gas companies in the world, concentrating on product testing, Cisco industrial hardware configuration and testing, process control network layout and design, and industrial wireless technology implementation.

Links:

Similar Presentations: