Main menu:

• Home
• Consulting
• Research
• Events
• Subscribe
• About Us
• Resources
  • Podcast Archives
  • Presentations
  • S4 Proceedings
  • White Papers and Articles

 

 

 

AAA  AAA 

White Papers and Articles

Here are a selection of Digital Bond white papers and published articles on SCADA security.

Articles

• ECC and SCADA Key Management by Rob Lambert of Certicom from S4 2007.
• SCADA Honeynets by Dale Peterson in InfraGard’s Gardian, 2007
• Uncovering Cyber Flaws by Eric Byres and Matt Franz in ISA’s InTech, 2006
• SCADA Vulnerability Disclosure by Matt Franz in the PCSF Report, 2006
• Securing IP Control Protocols by Dale Peterson in Control Magazine, 2005
• The Compliance Cost of NERC CIP by Doug Howard and Dale Peterson in New Power Exectuive Weekly, 2005
• New Funding for Automation Security Research by Dale Peterson from Control Magazine, 2004
• Intrusion Detection and Cybersecurity by Dale Peterson. An award winning paper in ISA’s InTech, 2004

White Papers

• OPC Security: Part 3 . Part 3 gives step by step guidance to secure OPC clients and servers.
• OPC Security: Part 2 . Part 2 describes risks and vulnerabilities in OPC clients and servers.
• OPC Security: Part 1 . Part 1 includes the results from an OPC security survey and an overview of the different OPC specifications such as DA, HDA and A&E.
• Scanning Control Systems . Why you must scan your control system and Digital Bond’s scanning methodology.
• Protecting Critical Information - Options for Securing Email and Physical Distribution . Four different solution categories are discussed and evaluated.
• SCADA Honeynet Analysis fromTwo Days at PCSF Annual Meeting. We deployed a SCADA Honeynet and let PCSF attendees attack it. See some of the attack data captured by the SCADA Honeynet.

Common Criteria Protection Profiles

Digital Bond wrote two Common Criteria Protection Profiles for PCSRF. Protection Profiles define the security functional and assurance requirements for a product or system. In theory, vendors can certify their solutions to the Protection Profile, but this is very unlikely to happen.

The Common Criteria is written in a very structured and frustratingly complex language, However, the more time you spend with it, the more you appreciate its beauty.

The Field Device Protection Profile defines requirements for the next generation of PLC’s, RTU’s, and IED’s.

• Field Device Protection Profile
• Plain English Guide To The Field Device Protection Profile (highly recommended)
• Field Device Protection Profile Presentation

The Control Center Protection Profile defines the requirements for systems and networks typically found inside the physical boundary of a Control Center.

• Control Center Protection Profile
• Control Center Protection Profile Presentation