RE: east coast powergrid / SCADA [OT?]

[Kane Lightowler <kanel () it alstom com au>]

I Caught the PBS doco, thought it was quite interesting.
I got the secion on the power grid & SCADA systems online if anyone is
interested
http://scooby.oranged.to/cyberwar/4_hi.mov

Enjoy

Kane

-----Original Message-----
From: Andre Ludwig [mailto:ALudwig () Calfingroup com] 
Sent: Friday, 15 August 2003 10:15 AM
To: 'KF'
Cc: 'full-disclosure () lists netsys com'
Subject: RE: [Full-disclosure] east coast powergrid / SCADA [OT?]


It is my general feeling that the power failure could be SCADA related.  If
it was an attack or an accident i do not know, nor do i think the
appropriate information will ever be released to the public.  Allot of SCADA
systems from my research do RUN MS software (from win95 all the way up to
win2000), granted these are not full fledge systems but stripped down
machines with some functionality disabled.  I have found out that RPC is
used on several SCADA systems, to what extent i do not know, nor do i know
if they are vulnerable to the recent rash of RPC based exploits.  If someone
with more knowledge on these systems can please come forward i would greatly
appreciate it. 

Did anyone watch the PBS cyber war series that was on months ago?  I
remember Richard Clarke ranting about possible SCADA attacks on the power
grid. If anyone has more info please do come forward as this is a rather
interesting subject matter.

Andre Ludwig, CISSP

-----Original Message-----
From: KF [mailto:dotslash () snosoft com]
Sent: Thursday, August 14, 2003 3:54 PM
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] east coast powergrid / SCADA [OT?]


Anyone wanna comment on SCADA and the "cascading failure" that happened 
today in the north east, like potential for a similar outage from a 
"cyber based" attack, etc? 

Sorry ... I need to read about something other than blaster before I go 
insane. =]
-KF

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


CONFIDENTIALITY: This e-mail and any attachments are confidential and may be privileged. If you are not a named 
recipient,please notify the sender immediately and do not disclose the contents to another person, use it for any 
purpose or store or copy the information in any medium.