7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

1/28

Orocuxgzo Sukkipw ej xbo Sxuhw em socupgxw ej

Su~opzgsepw Cemxped imh Hixi Icyugsgxgem"SCIHI' swsxoks

Kipcb 0>90

GMJEPKIXGEM SOC_PGXW E@SOPZIXEPW

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

2/28

Koxbehedeaw

GMXOCE ^PEWOCX I@E_X SCIHI SWSXOKS SOC_PGXW

Sxuhw

Hgiamesxgc

^picxgcid augho

Xpigmgma imh iqipomoss

Hecukomxipw Imidwsgs , ^opsemidgmxopzgoq xe or~opxs

Socupgxw ej Su~opzgsepw Cemxped imhHixi Icyugsgxgem "SCIHI' swsxoks

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

3/28

Sxuhw i`eux Socupgxw gm SCIHI swsxoks

Gmxpehucxgem xe su~opzgsepw imh cemxpedswsxoks

I~~dgcixgems imh ihzimxiao ej usgmasu~opzgsepw imh cemxped swsxoks

I~~dgci`do diq imh gmxopmixgemid

sximhiphs Socupgxw pgsls ej su~opzgsepw imh

cemxped swsxoks

Socupgxw koisupos imh aeeh ~picxgcos

^edgcw pocekkomhixgems

Pocekkomhixgems xe usops imhgmhusxpwGMJEPKIXGEM SOC_PGXW E@SOPZIXEPW

Sxuhw em socupgxw ej Su~opzgsepwCemxped imh Hixi Icyugsgxgem

"SCIHI' swsxoks

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

4/28

Gmxpehucxgem xe SCIHI swsxoks

Gmhusxpgid ^pecoss Su~opzgsepw imh Cemxped SwsxoksXbgs xopk usuiddw gmcduhos GCS$ SCIHI$ HCS w ^DC

SCIHI "Su~opzgsepw Cemxped Imh Hixi Icyugsgxgem'Swsxoks

SCIHI Swsxoks Cek~emomxs

Cemxped Comxop

^esgxgems qbopo xbo swsxoks gs e~opixoh$ su~opzgsohimh cemxpeddoh-

Cekkumgcixgems

Cekkumgcixgem moxqepls$ `oxqoom xbo cemxped comxopimh omh~egmxs-

Jgmid decixgems

Hozgcos xbix ipo su~opzgsoh imh cemxpeddoh pokexodw-Somseps$ zidzos$ cikopis$ igp cemhgxgemgma

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

5/28

Gmxpehucxgem xe SCIHI swsxoks

Socupgxw cek~ipixgzo `oxqoom SCIHI swsxoks imh GCX

GCX Swsxoks SCIHI Swsxoks

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

6/28

Gmxpehucxgem xe xbo SCIHI swsxoks

Cek~emomx ^bwsgcid sijoxw Deagcid Socupgxw Jumcxgemidgxw

Cemxped comxops B K B

Cekkumgcixgems K+D K B

Decixgems K+D D B

SCIHI Swsxoks Kixupgxw

B6 BgabK6 KohgukD6 Deq

Sukkipw

Jumcxgemiddw$ xbo kixupgxw gm xbgs hozgcos cim `o cemsghopohzopw bgab-

Jpek xbo socupgxw ~egmx ej zgoq$ xbo kixupgxw cim `o xpoixohis kohguk ep kohguk+deq-

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

7/28

SCIHI swsxoks i~~dgcixgems

Su~opzgsepw imh%ep kimiaokomx ej odokomxs aoeapi~bgciddwhgsxpg`uxoh

Sizgma cesxs

Kesx ojjgcgomx jumcxgemidgxw

Comxpidgvoh kimiaokomx

Socupgxw kocbimgsks cemjgaupixgem

Xisl iuxekixgem

Pos~emso gmcghomx xgko pohucxgem-

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

8/28

I~~dgcixgems ej SCIHI swsxoks

Su~opzgsepw imh kimiaokomx ej cek~dor gmhusxpgid ~pecoss

Oiso ej kimiaokomx

Poid xgko su~opzgsgem

Bgsxepgcid sxepiao gmjepkixgem

Poid xgko gmjepkixgem i`eux ~pecoss

Kemgxepgma imh kimiaokomx ej peuxgmo sopzgcos imh `isgc gmjpisxpucxupo

Comxpidgvoh kimiaokomx imh sopzgcos

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

9/28

_so ej SCIHI swsxoks

Socxep imidwsgs

Xw~gcid socxeps xbix bizo `oom usoh SCIHI swsxoks

Omopaw Aomopixgem Omopaw Xpimskgssgem imh hgsxpg`uxgem

^oxpecbokgcid gmhusxpw Qixop Xpoixkomx

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

10/28

Poaudixepw jpikoqepl

Icx 2%0>996 Icxgems jep xbo ^pexocxgem ej Cpgxgcid Gmjpisxpucxupo

I~~pe~pgixo sxpixoagos imh sxpucxupos usoh xe hgpocx imhceephgmixo icxgzgxgos ej ^u`dgc Ihkgmgsxpixgem jep ~pexocxgem ejCpgxgcid Gmjpisxpucxupo ipo hojgmoh-

^pexocxgem swsxok ej Cpgxgcid Gmjpisxpucxupo poaudixgem-

Gmxopgep Kgmgsxpw$ exbop sxixo epaimgvixgems imh ~pgzixo socxepsipo gmzedzoh-

Doagsdixgzo icxgems xilom ipo i~~pe~pgixo is i jgpsx sxo~-

Aomopgc poaudixgems jep SCIHI swsxoks heos mex orgsx

Socxepgid imh cpgxgcid gmjpisxpucxupo poaudixgems

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

11/28

Pgsl kimiaokomx gm SCIHI swsxoks

Kigm ciuso ej pgsl

P o k e x o sw s x o k s b i z o i d q i w s ` oo m i x p g s l - X b o k i g m p gs l u s o h x e ` o i

~ b w s gci d gm x p u s ge m $ i m h i s x b ow b i z o oz e dz oh x b o m u k ` op e j x b p oi x s b i s

` o o m g m c p o i s o h -

Socupgxw xbpeuab e`scupgxw

Kgmgkgvixgem ej pgsl imh xbpoixs

Gmcpoiso ej zgsg`gdgxw

Dicl ej socupgxw iqipomoss ej xbo sxijj

Gmxopcemmocxgem qgxb orxopmid moxqepls

_so ej xocbmedeagos imh seduxgems ej aomopid ~up~eso

Qoil ozeduxgem % hojgcgx ej u~hixo

Hojiudx cemjgaupixgems imh ~issqephs

Gmsocupo moxqepl ipcbgxocxupos-

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

12/28

Pgsl kimiaokomx gm SCIHI swsxoks

Dicl ej iqipomoss

Gmi~~pe~pgixo usoh

Sxijj xpigmgma

Kudxghgscg~dgmipw xoiks Soxxgma ~edgcgos jep usgma

oyug~komx

Dgkgxoh ozeduxgem ej xbo swsxoks

Hosgam heos mex cemsghop socupgxw

Or~esgxgem swsxok gmcpoiso

_so ej xocbmedeagos ej aomopid~up~eso

Gmcpoisoh ixxicl ~essg`gdgxgos

^bwsgcid cekkumgcixgem dgmls

Socupgxw iuhgxs

Moxqepl swsxok gmzomxepw-

Gmxoapixo socupgxw poyugpokomxsgm hosgam sxiao-

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

13/28

Pgsl kimiaokomx gm SCIHI swsxoks

Gsedixgem

Dess ej ~pgzicw%cemjghomxgidgxw

Kepo se~bgsxgcixoh ixxicls

I~~dgcixgems $ e~opixgma swsxoksimh oyug~komxs biphomgma

^pojopi`dw uso dgmls ~bwsgcidcekkumgcixgems

Cg~bop cekkumgcixgems

@decl%Gmxopco~xgem%Jepaopw ej cekkumgcixgems

Ezopcemjghomco em xbo gmxopmidsocupgxw

Ezopcemjghomco gm ok~dewoos

I`somco ej gmxopmid socupgxwkoisupos

Gmxopmid ixxicl6 Si`exiao imh s~w

^pozgeus posoipcb xe sxijjpocpugxkomx e~opixep

Icxgzixo iuhgxepw deas

Hojgmgxgem imh i~~dgcixgem ej pudospos~emsg`gdgxgos

Posxpgcx ~bwsgcid iccoss xe xboSCIHI moxqepl imh gxs hozgcos

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

14/28

Pgsl kimiaokomx gm SCIHI swsxoks

Gmi~~pe~pgixo cemmocxgemsqgxb exbop moxqepls

Dicl ej socupgxw ejgmxopcemmocxoh hozgcos

Gmsocupo pokexo iccoss xeoyug~komxs

Orxopmid ixxicl

Posxpgcx deagcid Iccoss ej SCIHIswsxoks `oxqoom moxqepls

Socupgma pokexo iccoss xe xboswsxoks

Loo~ u~ xe hixo sejxqipoimxgzgpus sgamixupos

Gmsocupo moxqepl hosgam

Gmi~~pe~pgixo moxqeplcemjgaupixgems

Gmsocupo moxqepl ipcbgxocxupo

Hu~dgcixo ossomxgid moxqeplcek~emomxs

Hojgmgxgem ej hgjjopomx socupgxwdozods

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

15/28

P h g

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

16/28

Pocekkomhixgems

Gmhusxpw

Ejjop ~pehucxs xbix gmxoapixo socupgxwkoisupos

Gmcduho socupgxw poyugpokomxs gm xbohosgam sxiao jep oicb cek~emomx ejxbo swsxok

^pgepgxgvo xbo seduxgem ej qodd+lmeqzudmopi`gdgxgos usgma ejjgcgid socupgxw~ixcbos

Jicgdgxixo gmxoapixgem ej aomopid~up~eso ~pehucxs

_sops

Hokimh ~pehucxs xbix auipimxoosocupgxw poyugpokomxs

Sxiw gmjepkoh i`eux gmcghomxs$zudmopi`gdgxgos imh socupgxwmexgjgcixgems

Osxi`dgsb poyugpokomxs imh ~edgcgosi`eux socupgxw SCIHI ~pehucxs

P h xg

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

17/28

Pocekkomhixgems

Doagsdixeps

Hoo~omgma gm xbo doagsdixgzo jpikoqepl

^emhop xbo uso ej osxi`dgsbgma simcxgemgma epaimgsks imhkocbimgsk

Hojgmo socupgxw kimhixepw koisupos

Gmcpoisoh ceddi`epixgem u`dgc Ihkgmgsxpixgem + ~pgzixo socxep

Socxepgid poaudixgem

Cemsghop exbop epgagms imh kexgzixgems jep ixxicls

Cemsghop xbo ~essg`gdgxw ej osxi`dgsbgma poyugpokomxs ephokimhoh copxgjgcixgems jep socupgxw deagcid s~ocgidgsxs jep xbgs

lgmh ej swsxoks

C d g Sx xb

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

18/28

Cemcdusgems + Sxpomaxbs

Comxpidgvoh kemgxepgma imh kimiaokomx

^pecoss iuxekixgemGk~pezokomx gm ~pecoss ojjgcgomcw

Cek~dorgxw ej kigmxomimco pohucxgem

Dema+xopk cesx pohucxgem

I~~dgci`gdgxw ej GCX seduxgems

Sgamgjgcimx pohucxgem ej cesxs

^essg`gdgxw xe icco~ximco sximhiphs

Bgab izigdi`gdgxw

C d g E x gxg

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

19/28

Cemcdusgems + E~~epxumgxgos

Aomopid ~up~eso xocbmedeaw kgapixgem

Pohuco cesxs imh gk~pezgma cuppomx sbepxcekgmas

Bgab ojjgcgomcw

Poaudixgem imh doagsdixgem

Xbo moq doagsdixgem koims im gk~pezo e~~epxumgxw

Cbimagma omzgpemkomx

E~~epxumgxw xe ceppocx bgsxepgcid hojgcgomcgos hoxocxoh

Cemcdusgems Qoilmoss

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

20/28

Cemcdusgems + Qoilmoss

Gmbopgxoh zudmopi`gdgxgos

Jpek s~ocgjgc xocbmedeaw imh aomopid ~up~eso xocbmedeaw

Bgab ho~omhomco jpek kimujicxupops

Dicl socupgxw iqipomoss

Kiamgxuho imh cek~dorgxw ej xbo swsxok

Gmi~~pe~pgixo epaimgvixgem cbipxSoapoaixgem ej deagcid imh ~bwsgcid socupgxw koims doss~po~ipixgem iaigmsx xbpoihs-

I`somco ej s~ocgidgvoh seduxgems

Dgkgxixgems jpek xbo mooh jep izigdi`gdgxw

^pgepgxgvo izigdi`gdgxw bis doh xe i hocpoiso ej socupgxw

Cemcdusgems Xbpoixs

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

21/28

Cemcdusgems + Xbpoixs

Kidgcgeus _sops

Xoppepgsx apeu~$ biclops$ oxc-

Hgscdesupo em xbo Gmxopmox

Bgab or~esgxgem ; apoixop ixxicl supjico

Zudmopi`gdgxw ~u`dgcixgems

Koims i qoilmoss xe swsxoks ijjocxoh

@isgc sopzgco gmxoppu~xgems

Xbo kixopgidgvixgem ej i xbpoix gm xboso swsxoks kiw gmzedzoxbo hgspu~xgem ej im ossomxgid sopzgco

Cemcdusgems ^exomxgidgxgos

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

22/28

Cemcdusgems + ^exomxgidgxgos

^EXOMXGIDGXGOS; E^^EPX_MGXGOS SXPOMAXBS

Hozode~komx ej su~opzgsepw imh kimiaokomx swsxoks gm poid

xgko zgi aomopid ~up~eso xocbmedeaw_sgma GCX seduxgems xe gk~pezo Socupgxw

Dema+xopk cesx pohucxgem

Xilgma ihzimxiao ej apoixop ojjgcgomcw imh aomopid ~up~esoxocbmedeagos

^pehucxgem ~pecossos ep sopzgcos iuxekixgem

Auipimxoo ej kemgxepgma ~pecoss pe`usxmoss

Bgab izigdi`gdgxw imh kepo ojjgcgomxdw-

_so ej aomopid ~up~eso xocbmedeaw xe gk~pezo poaudixgems

cek~dgimco

Cemcdusgems Dgkgxixgems

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

23/28

Cemcdusgems + Dgkgxixgems

DGKGXIXGEMS ; QOILMOSS XBPOIXS

Zudmopi`gdgxgos ipo ~ipxgcudipdw himaopeus

^u`dgcixgem ej zudmopi`gdgxw hoxigds

Pgso ej cw`op xoppepgsk

Dicl ej seduxgems imh bgab or~esgxgem

@peih ixxicl supjico

Xbo ixxicl supjico gs huo xe bgab or~esupo imh xbokiamgxuho ej SCIHI swsxoks

Deq ~pexocxgem iaigmsx imw lgmh ej xbpoixs

Huo xe xbo hgjjopomcos `oxqoom ~bwsgcid imh deagcid socupgxw

Sxpema izigdi`gdgxw poyugpokomxs sekoxgkos posudx gmdgkgxixgems xe socupgxw

Cemcdusgems + Pgsls

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

24/28

Cemcdusgems + Pgsls

PGSLS ; SXPOMAXBS XBPOIXS

Gmxoposx jecus xe ixxiclops

Apeqgma u~ Gmxopmox cemmocxgems

Jep `exb izigdi`gdgxw imh cemjghomxgidgxw

Sopzgco gmxoppu~xoh cim doih xe bgab ocemekgc gk~icxs

^essg`do moaixgzo gk~icx ej GCX seduxgems

I~~dwgma xboso seduxgems xe i ~ipxgcudip omzgpemkomx kusx`o sxuhgoh xbepeuabdw-

Cemcdusgems + Cbiddomaos

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

25/28

Cemcdusgems + Cbiddomaos

CBIDDOMAOS; E^^EPX_MGXGOS QOILMOSSOS

Aomopid ~up~eso xocbmedeaw kgapixgem

Sbeudh `o hemo qgxbeux xbogp zudmopi`gdgxgos

Poaudixgems cek~dgimco

^ipxgcudipdw jep skidd `usgmoss

Ceppocx ho~dewkomx ej SCIHI swsxoks

^essg`gdgxw ej `ocekgma xbo xipaox ej ixxicls imh xbpoixs

Ihi~x xe cbimagma omzgpemkomx

^eep ihi~xixgem cim posudx gm i sgxuixgem ej apoix gmsocupgxw

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

26/28

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

27/28

e`sopzixepgeNgmxoce-os

bxx~6%%e`sopzixepge-gmxoce-os

bxx~6%%qqq-jico`eel-cek%E`sopziGMXOCE

bxx~6%%qqq-xqgxxop-cek%E`sopziGMXOCE

bxx~6%%qqq-scpg`h-cek%E`sopziGMXOCE

bxx~6%%qqq-weuxu`o-cek%E`sopziGMXOCE

bxx~6%%qqq-gmxoce-os%`deas%gmxoce%Soaupghih%@deaSoaupghih

Somh weup yuosxgems imh cekkomxs xe6

Jeddeq us em6

Jico`eel pejgdo

Xqgxxop pejgdo

Scpg`h pejgdo

Weuxu`o ^pejgdo

Gmjepkixgem Socupgxw E`sopzixepw @DEA

mailto:observatorio@inteco.eshttp://observatorio.inteco.es/http://www.facebook.com/ObservaINTECOhttp://www.twitter.com/ObservaINTECOhttp://www.scribd.com/ObservaINTECOhttp://www.youtube.com/ObservaINTECOhttp://www.inteco.es/blogs/inteco/Seguridad/BlogSeguridadhttp://www.inteco.es/blogs/inteco/Seguridad/BlogSeguridadhttp://www.youtube.com/ObservaINTECOhttp://www.scribd.com/ObservaINTECOhttp://www.twitter.com/ObservaINTECOhttp://www.facebook.com/ObservaINTECOhttp://observatorio.inteco.es/mailto:observatorio@inteco.es

7/31/2019 Executive Summary of the Study on security of Supervisory Control and Data Acquisition (SCADA) systems

28/28

bxx~6%%qqq-gmxoce-os

bxx~6%%e`sopzixepge-gmxoce-os