wait ics d oesn t stand for
play

Wait, ICS d oesnt stand for "Internet-Connected Systems"? - PowerPoint PPT Presentation

Aug 23, 2023 •205 likes •413 views

Wait, ICS d oesnt stand for "Internet-Connected Systems"? Jan Kopiva jan.kopriva@alef.com | @jak0pr ALEF CSIRT TLP: WHITE Are ICS connected to the internet common? Only few cases a year make it to mainstream media We

  1. Wait, ICS d oesn’t stand for "Internet-Connected Systems"? Jan Kopřiva jan.kopriva@alef.com | @jak0pr ALEF CSIRT TLP: WHITE

  2. Are ICS connected to the internet common? • Only few cases a year make it to mainstream media • We tend to assume there is a lot more, but very few studies on the topic exist

  3. How would an attacker find connected ICS?

  4. Is ICS connected to the internet dangerous? • Many industrial protocols lack any security functionalities … • …so the short answer is „ yes “

  5. What did we do? • 21st – 22nd October 2019 • Look at commonly used industrial ports/protocols (mostly using using TriOp toolkit) • Some limited manual verification of results

  6. How many ICS are out there? United States 1 Italy 2 Canada 3 Spain 4 Germany 5 France 6 Russian Federation 7 Sweden 8 Australia 9 10 United Kingdom 0 10000 20000 30000 40000 50000 60000

  7. How many ICS are out there? 20 19 18 17 16 15 14 13 12 11 Korea Netherlands Turkey Taiwan Austria Poland Brazil Belgium Norway Hungary 0 500 1000 1500 2000 2500 3000

  8. How many ICS are out there? 30 29 28 27 26 25 24 23 22 21 Czech Republic Switzerland Israel Denmark Romania Japan Greece Portugal China Lithuania 0 200 400 600 800 1000 1200 1400 1600

  9. That‘s not great … • If Shodan data were representative for all IPs in a country • Czech Republic ~ 0,1% IPs • Russia ~ 0,03% IPs • United States ~ 0,02% IPs • China ~ 0,002% IPs

  10. …but is this normal? IPs responding on port 502 (Modbus) 100 200 300 400 500 600 700 800 0 Poland Australia 23.08.2019 25.08.2019 27.08.2019 29.08.2019 31.08.2019 02.09.2019 Romaina Canada 04.09.2019 06.09.2019 08.09.2019 10.09.2019 12.09.2019 14.09.2019 Russia China 16.09.2019 18.09.2019 20.09.2019 22.09.2019 24.09.2019 26.09.2019 28.09.2019 Slovakia Czech Republic 30.09.2019 02.10.2019 04.10.2019 06.10.2019 08.10.2019 10.10.2019 Great Britain 12.10.2019 14.10.2019 16.10.2019 18.10.2019 20.10.2019 22.10.2019

  11. 100 150 200 250 300 350 400 450 Let‘s take a look at the Czech Republic… 50 0 23.08.2019 25.08.2019 27.08.2019 port 502 (Modbus) 29.08.2019 31.08.2019 02.09.2019 04.09.2019 06.09.2019 08.09.2019 10.09.2019 12.09.2019 port 44818 (EtherNet/IP) 14.09.2019 16.09.2019 18.09.2019 20.09.2019 22.09.2019 24.09.2019 26.09.2019 28.09.2019 30.09.2019 02.10.2019 port 47808 (BACnet/IP) 04.10.2019 06.10.2019 08.10.2019 10.10.2019 12.10.2019 14.10.2019 16.10.2019 18.10.2019 20.10.2019 22.10.2019

  12. What is/was out there? S7comm (102) BACnet/IP (47808) EtherNET/IP (44818) 4% 6% 1% Lantronix Discovery Modbus (502) (30718) 30% 26% Moxa Nport (4800) 3% EtherNet/IP (2222) CoDeSys (2455) 12% EIBnet (3671) 18%

  13. What is/was (probably) out there? • HVAC and temperature controllers • Elevator controller • „Smart“ buildings • Camera systems controller • Solar power plants • Physical security systems • Biogas plant • Industrial processes controllers • Local power grid controller • Industrial measuring equipment • General use PLCs

  14. Some control panels required authentication …

  15. … others didn‘t

  16. Informing interested parties • Big help from (and big thanks to) • CZ.NIC – National Registrar for CZ TLD • NCISA/NÚKIB – National Cyber and Information Security Agency

  17. 1100 1150 1200 1250 1300 1350 1400 1450 That was then … 24.10.2019 26.10.2019 28.10.2019 30.10.2019 01.11.2019 03.11.2019 05.11.2019 07.11.2019 09.11.2019 11.11.2019 13.11.2019 15.11.2019 17.11.2019 19.11.2019 21.11.2019 23.11.2019 25.11.2019 27.11.2019 29.11.2019 01.12.2019 03.12.2019 05.12.2019 07.12.2019 09.12.2019 11.12.2019 13.12.2019 15.12.2019 17.12.2019 19.12.2019 21.12.2019 23.12.2019 25.12.2019 27.12.2019 29.12.2019 31.12.2019 02.01.2020 04.01.2020 06.01.2020 08.01.2020 10.01.2020

  18. … this is now • 122,784 ICS systems on Shodan - January 10th US CA ES DE RU KR GB AU TW PL 0 10000 20000 30000 40000 50000 60000

  19. A look at current situation in Spain S7comm, 349 Rest, 929 Modbus, 1333 BACnet/IP, 195 EtherNET/IP, 194 Lantronix Discovery, 77 Moxa Nport, 249 CoDeSys, 127 EIBnet, 1890

  20. Thank you for your attention TLP: WHITE

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

KRISTA BOAN WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT,

KRISTA BOAN WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT,

KRISTA BOAN WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? WAIT, WHAT JUST HAPPENED? 1 in 5 children have mental health problems 43% increase in ADHD 37% increase in teen

552 views • 19 slides
9/3/2020 Pretest What does NRS stand for? What does EFL stand for? What does PoP stand

9/3/2020 Pretest What does NRS stand for? What does EFL stand for? What does PoP stand

9/3/2020 Pretest What does NRS stand for? What does EFL stand for? What does PoP stand for? When does a new PoP begin? Why do we collect data on barriers to employment? What is the difference between a reportable individual

397 views • 5 slides
Meeting will start shortly, please stand by! Welcome! A Few Housekeeping Notes: Its Great

Meeting will start shortly, please stand by! Welcome! A Few Housekeeping Notes: Its Great

Collaborative Meeting October 2, 2020 Meeting will start shortly, please stand by! Welcome! A Few Housekeeping Notes: Its Great to see you all today, we cant wait to REALLY see you! We will be recording all presentations

382 views • 27 slides
CS 457 Lecture 5 Reliable Delivery Part 2 Fall 2011 Stop and Wait in Action Stop and Wait

CS 457 Lecture 5 Reliable Delivery Part 2 Fall 2011 Stop and Wait in Action Stop and Wait

CS 457 Lecture 5 Reliable Delivery Part 2 Fall 2011 Stop and Wait in Action Stop and Wait In Action (2) How Long Should Sender Wait? Sender sets a timeout to wait for an ACK Too short: wasted retransmissions Too long: excessive

239 views • 20 slides
Competitive Freshness Algorithms for Wait free Objects Wait-free Objects Peter Damaschke, Phuong

Competitive Freshness Algorithms for Wait free Objects Wait-free Objects Peter Damaschke, Phuong

Competitive Freshness Algorithms for Wait free Objects Wait-free Objects Peter Damaschke, Phuong Ha & Philippas Tsigas Presentation at the Euro-Par 2006 29 th Aug. 1 st Sept. 2006, Dresden, Germany. Introduction Wait-free data objects

365 views • 17 slides
CV Border Wait- -Time Time CV Border Wait Measurement Project Measurement Project Border

CV Border Wait- -Time Time CV Border Wait Measurement Project Measurement Project Border

TC/Ontario: CV Border Wait Time Measurement Project CV Border Wait- -Time Time CV Border Wait Measurement Project Measurement Project Border Challenges & Regional Solutions: The 2010 Olympics & The Pacific Northwest Experience

300 views • 6 slides
T HE N EED IN I OWA - 2002 27 School Districts at >40% T HE N EED IN I OWA - 2014 153

T HE N EED IN I OWA - 2002 27 School Districts at >40% T HE N EED IN I OWA - 2014 153

2/18/2016 Carrie Scheidel, MPH The webinar will begin at 1:30pm.. S UMMER F OOD S ERVICE P ROGRAM H UNGER D OESN T T AKE A S UMMER V ACATION S TEPHANIE D ROSS SFSP C ONSULTANT B ACKGROUND Ensure children could continue to receive

392 views • 15 slides
Fire safety: AESO building evacuation procedures Calgary Place BP Centre SCC Slow alarm: Slow

Fire safety: AESO building evacuation procedures Calgary Place BP Centre SCC Slow alarm: Slow

Fire safety: AESO building evacuation procedures Calgary Place BP Centre SCC Slow alarm: Slow alarm: When alarm sounds: Stand by Stand by Proceed to Guard House Listen to Listen to Wait for further instruction

652 views • 17 slides
Cyber Cybersecurity security Wher here do w e do we stand? e stand? HUMAN HUMAN FACT

Cyber Cybersecurity security Wher here do w e do we stand? e stand? HUMAN HUMAN FACT

Cyber Cybersecurity security Wher here do w e do we stand? e stand? HUMAN HUMAN FACT CTOR OR Hussein Hassanali Chief Information Security Officer, Bank AL Habib Limited & President, ISACA Karachi Chapter UBL Funds Culture

376 views • 19 slides
How to Stand Out from the Crowd on How to Stand Out from the Crowd on LinkedIn LinkedIn Maureen

How to Stand Out from the Crowd on How to Stand Out from the Crowd on LinkedIn LinkedIn Maureen

How to Stand Out from the Crowd on How to Stand Out from the Crowd on LinkedIn LinkedIn Maureen Coogan April 7, 2020 Objectives Objectives Create a professional profile on the LinkedIn platform Detail the different methods to

833 views • 25 slides
Ma Mark 1 k 12:30-31 31 I I STAN STAND D AM AMAZED AZED I I stand d ama mazed d in

Ma Mark 1 k 12:30-31 31 I I STAN STAND D AM AMAZED AZED I I stand d ama mazed d in

Ma Mark 1 k 12:30-31 31 I I STAN STAND D AM AMAZED AZED I I stand d ama mazed d in the pr presenc nce Of Of J Jesus us the the Na Nazarene ne And wonde And w onder how how H He c could ould love love m me A s A

1.3k views • 107 slides
Whats wrong with my Plant? aka Wait, wait; dont spray!! Reasons NOT to Spray Insecticides

Whats wrong with my Plant? aka Wait, wait; dont spray!! Reasons NOT to Spray Insecticides

4/21/2015 Whats wrong with my Plant? aka Wait, wait; dont spray!! Reasons NOT to Spray Insecticides Bad for the environment Bad for the plant Bad for you Good chance it might not be the right solution; i.e., it wont

612 views • 24 slides
Pilot Sit-Stand Workstation- Tools to Sell 1 6 Pilot-Value Proposition The Pilot

Pilot Sit-Stand Workstation- Tools to Sell 1 6 Pilot-Value Proposition The Pilot

Pilot Sit-Stand Workstation- Tools to Sell 1 6 Pilot-Value Proposition The Pilot Sit-Stand Workstation is the only ergonomic rear-mounted sit- stand height adjustable workstation that meets the ANSI/BIFMA and HFES requirements with

1.34k views • 27 slides
West Elkton Friends Meeting August 4, 2019 Stand to sing if able #181 Stand by Me New Socks A

West Elkton Friends Meeting August 4, 2019 Stand to sing if able #181 Stand by Me New Socks A

Welcome to West Elkton Friends Meeting August 4, 2019 Stand to sing if able #181 Stand by Me New Socks A Publishers Weekly Top 10 in Religion selection. This is nothing less than the gospel itselfa much - needed book. FR.

949 views • 40 slides
10/29/2019 Critical sections 1 2 global wait(s) wait(s) memory buffer write read x

10/29/2019 Critical sections 1 2 global wait(s) wait(s) memory buffer write read x

10/29/2019 Critical sections 1 2 global wait(s) wait(s) memory buffer write read x = 3; int x; a = x+1; critical Problems caused by y = 5; section int y; b = y+2; critical section mutual exclusion signal(s) c = x+y;

488 views • 14 slides
Others see crisis, we see opportunity Performance Update to the Board LOOKING BACK OVER THE

Others see crisis, we see opportunity Performance Update to the Board LOOKING BACK OVER THE

Others see crisis, we see opportunity Performance Update to the Board LOOKING BACK OVER THE PAST 6 MONTHS: Wait Times target setting Wait Times monitoring Wait Times re-allocation EMERGING ISSUES: Hospital Standardized

797 views • 10 slides
Pseudofunctors and simplicial categories Overview of the problem Enrichment through variation

Pseudofunctors and simplicial categories Overview of the problem Enrichment through variation

Pseudofunctors and simplicial categories Nick Gurski Case Western Reserve University Pseudofunctors and simplicial categories Overview of the problem Enrichment through variation Nick Gurski Our higher dimensional Case Western Reserve

755 views • 51 slides
Harnessing P urpose, E mpowerment, A ction and K nowledge ( P.E.A.K ) for School Improvement by

Harnessing P urpose, E mpowerment, A ction and K nowledge ( P.E.A.K ) for School Improvement by

Global Education Conference - Concurrent Session 1 on 12 July 2012 Harnessing P urpose, E mpowerment, A ction and K nowledge ( P.E.A.K ) for School Improvement by Mrs Sng Siew Hong Principal, Riverside Secondary Global Education Conference -

229 views • 19 slides
Jointly Learning Word Representations and Composition Functions Using Predicate-Argument

Jointly Learning Word Representations and Composition Functions Using Predicate-Argument

Jointly Learning Word Representations and Composition Functions Using Predicate-Argument Structures Kazuma Hashimoto (UT) Pontus Stenetorp (UT) Makoto Miwa (TTI) Yoshimasa Tsuruoka (UT) U niversity of T okyo ( UT ) T oyota T echnological I

1.39k views • 119 slides
SJI 04 Pelandok Scouts Founded in 1911 Oldest Scout Troop in Singapore Consists of the

SJI 04 Pelandok Scouts Founded in 1911 Oldest Scout Troop in Singapore Consists of the

SJI 04 Pelandok Scouts Founded in 1911 Oldest Scout Troop in Singapore Consists of the Scout, Venture and Rover units Scout Investiture Ceremony Overview of Activities Friday Trainings + 1 Saturday Training per month Patrol

135 views • 10 slides
Report on European Particle Physics Strategy Update Brigitte Vachon McGill University Fermilab

Report on European Particle Physics Strategy Update Brigitte Vachon McGill University Fermilab

Report on European Particle Physics Strategy Update Brigitte Vachon McGill University Fermilab PAC meeting 18 January 2019 Outline EPPSU 2020 process and organization Progress report US and Canada submissions Brigitte Vachon,

466 views • 15 slides
IODEF Incident object description and exchange format Developed within Terenas TF-CSIRT This

IODEF Incident object description and exchange format Developed within Terenas TF-CSIRT This

IODEF Incident object description and exchange format Developed within Terenas TF-CSIRT This material is public :) Jan Meijer <jan.meijer@surfnet.nl> IODEF: what is it about? Problem statement: define a common data format for sharing

320 views • 9 slides
Towards a formalization of Lewis context-dependent notion of knowledge in Dynamic Epistemic

Towards a formalization of Lewis context-dependent notion of knowledge in Dynamic Epistemic

Towards a formalization of Lewis context-dependent notion of knowledge in Dynamic Epistemic Logic Peter van Ormondt Institute for Logic, Language and Computation 8 January 2009 Peter van Ormondt (ILLC, UvA) Lewis Elusive Knowledge 8

606 views • 31 slides
Evolution Prospection Lu s Moniz Pereira and Han The Anh Abstract This work concerns the

Evolution Prospection Lu s Moniz Pereira and Han The Anh Abstract This work concerns the

Evolution Prospection Lu s Moniz Pereira and Han The Anh Abstract This work concerns the problem of modelling evolving prospective agent systems. Inasmuch a prospective agent [1] looks ahead a number of steps into the future, it is

329 views • 13 slides

More recommend