Thursday, May 19, 2011

May ICS-CERT Monthly Monitor

Yesterday, the DHS Industrial Control System Cyber Emergency Response Team (ICS-CERT) published the May issue of their Monthly Monitor. This the second of what hopefully will be a long run of monthly documents that “highlights recent activities and information products affecting industrial control systems (ICS) and provides a look ahead at upcoming ICS related events”.

There is a lot of good information summarized in this publication with extensive links to source documents. I particularly appreciate the section on ‘Incident Response’ This provides sanitized descriptions of actual cyber security events that the ICS-CERT people have dealt with in the last month. Some of them have already been dealt with in the open media, but most have never been publicly released.

This month’s issue contains a brief report about a security researcher’s identification of a vulnerable, internet-facing control system to ICS-CERT. In the Analysis section there is a brief update about the tools that researchers use to identify such sites.

This is a good publication for anyone involved in the management of control system security.

No comments:

/* Use this with templates/template-twocol.html */