Skip to content

Exploiting SCADA Systems

Jeremy Brown

Jeremy Brown - Exploiting SCADA Systems SCADA systems are just as vulnerable to attack today than they were ten years ago.

Summary

Architecture and Background

Jeremy Brown - Exploiting SCADA Systems SCADA systems are just as vulnerable to attack today than they were ten years ago. The lack of security awareness by SCADA software vendors, combined with the rush of hacking these systems, make them very attractive to hackers today.

Vulnerability Analysis

The focus of this presentation will be showing the disconnect between SCADA software and secure programming. There will be a live demonstration of Sploitware, a framework dedicated to vulnerability analysis of SCADA systems.

Exploitation and Demonstrations

This framework could be thought of as a proof of concept, although you will see it is more than mature enough to prove the point. Jeremy Brown is a computer security researcher employed at Tenable Network Security as a Vulnerability Research Engineer.

Remediation and Defensive Strategies

Jeremy enjoys vulnerability research and analysis, exploit development, programming, fuzzing, and reverse engineering. Twitter: @jeremybrownn For copies of the slides and additional materials please see the DEF CON 18 Archive here:

Related talks

Main Stage·43 min

  • DEF CON
  • Malware
  • Date: Jul 2010
  • Location: Las Vegas

Chaos Computer Club

Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.

malware-analysisreverse-engineeringexploit-development+1

Main Stage·49 min

  • DEF CON
  • Malware
  • Date: Jul 2010
  • Location: Las Vegas

Lineberry · Richardson · and Wyatt

Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.

malware-analysisreverse-engineeringexploit-development+1