Quantitatively Assessing and Visualising Industrial System Attack Surfaces
Quantitatively Assessing and Visualising Industrial System Attack Surfaces
Quantitatively Assessing and Visualising Industrial System Attack Surfaces
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Contents<br />
1 Introduction 9<br />
1.1 Goals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9<br />
1.2 <strong>Industrial</strong> Automation History . . . . . . . . . . . . . . . . . . . . . . . . . 10<br />
1.2.1 Incidents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11<br />
1.2.2 NERC CIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15<br />
2 Methodology 17<br />
2.1 Technology stack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18<br />
2.2 Rules of Engagement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18<br />
2.3 Device <strong>and</strong> <strong>System</strong> classification . . . . . . . . . . . . . . . . . . . . . . . . 19<br />
2.3.1 Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19<br />
2.3.2 <strong>System</strong>s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20<br />
2.4 Banners <strong>and</strong> Shodan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22<br />
2.4.1 Banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23<br />
2.5 Adding exploit information <strong>and</strong> geolocation . . . . . . . . . . . . . . . . . 23<br />
2.5.1 Exploit searches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23<br />
2.5.2 Geolocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27<br />
3 Exploring the Dataset 31<br />
3.1 Global inferences should not be made . . . . . . . . . . . . . . . . . . . . . 31<br />
3.2 Internal inferences provide some insight into the industry . . . . . . . . . . 32<br />
3.3 HTTP Response Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32<br />
3.4 Disambiguation <strong>and</strong> false positives . . . . . . . . . . . . . . . . . . . . . . 35<br />
3.4.1 Geolocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Change language