Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Dept. of Energy to Test Electrical Grid Against Cyberattacks
Newest First  |  Oldest First  |  Threaded View
epikqq
50%
50%
epikqq,
User Rank: Apprentice
8/7/2018 | 4:12:53 PM
epikqq
nice
BrianN060
50%
50%
BrianN060,
User Rank: Ninja
8/7/2018 | 11:39:47 AM
Re: Just a small test - a simple one...
Your reference to testing with only small scale attacks, against a sandboxed power grid is valid; but the components in that test grid likely are identical to those used in the national grid.  That will let DOE gather some useful data - though not providing much certainty as to how the vastly more complicated (and perhaps complex), system will react.  Keep in mind: our cyber enemies can't have a better insight into the effects of an all-out cyber-attack on our grid, than we have.  

I wonder if they'll let some attacks through purposefully, to see how long it takes to replace components and restore the system.  Again, useful; but not very, if we don't stockpile the components ahead of a real attack. 

As to the 1940 offensive: the French could only mount limited attacks, due to their commitment (financial, doctrinal, organizational, political and otherwise), to a static defense.  That's a lesson for our cyber-security doctrine as a whole: we can't rely on our version of a Maginot Line; we have to be ready to take it to our cyber enemies - and make sure they know we can and will. 

Not sure, but think it was also Gamelin who, after the fall of France decried "That's what you get from decades of socialist government."  I take that to mean setting priorities in line with an agenda directed toward satisfying domestic political demands, rather than preparations and commitment to meet aggression with aggression. 
reluctantinterlocutor
50%
50%
reluctantinterlocutor,
User Rank: Apprentice
8/7/2018 | 8:55:25 AM
Gold King Mine spill
I am reminded of similar word-ology just before the Gold King Mine spill, of course that was EPA and not DOE, completely different animals :laugh:. 
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
8/7/2018 | 8:11:16 AM
Just a small test - a simple one...
Words spoken by General Gamelin who commanded the French army in 1940 in attacks into Germany before the BIG ONE came in on May 10, 1940.  Gamelin just did little tiny probe attacks, meaningless while the Germans stockpiled tanks and aircraft for a modern campaign.   The comparison works.  Plum Island?  I don't think that replicates the complexity of the modern power grid.   Should be fun to watch though.  


Florida Town Pays $600K to Ransomware Operators
Curtis Franklin Jr., Senior Editor at Dark Reading,  6/20/2019
Pledges to Not Pay Ransomware Hit Reality
Robert Lemos, Contributing Writer,  6/21/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-12960
PUBLISHED: 2019-06-25
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.
CVE-2019-12961
PUBLISHED: 2019-06-25
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
CVE-2019-12962
PUBLISHED: 2019-06-25
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
CVE-2019-12963
PUBLISHED: 2019-06-25
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
CVE-2019-12964
PUBLISHED: 2019-06-25
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.