Those who know me know I have a problems with the notion of security through obscurity — the idea that one can achieve some measure of real security by hiding the item or knowledge which needs to be protected. As a security measure, obscurity has been around since man first hid from a predator. It [...]
For the past couple of weeks some friends and colleagues and I have been discussing a CNN story on the vulnerability of SCADA controlled generators. The story fed to CNN by the DHS is that power generators, under SCADA control, can be destroyed via cyber attack by telling or tricking the PLC into over-cycling the [...]
