insights into hack attacks on smart grid & the usa … · •previous script kiddie hacking the...
TRANSCRIPT
![Page 1: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/1.jpg)
INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA FRAMEWORKAUSTRIAN EU PRESIDENCY CONFERENCE CYBER SECURITY IN THE
ENERGY SECTOR
CHRIS KUBECKA, CEO HYPASEC
11 OCTOBER 2018
![Page 2: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/2.jpg)
BIOGRAPHY
• Cyber warfare incident management and advisement
• Critical infrastructure security expert: Oil & Gas, Water, Electric
& Nuclear
• Author, presenter at Black Hat, Security BSides, ICS/SCADA
Nuclear Cyber Security
• Previous headed Aramco Overseas Security Operations,
Information Protection & Intelligence
• Previous U.S Air Force Space Command
• Previous script kiddie hacking the US Government
![Page 3: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/3.jpg)
US SMART GRID FRAMEWORK INTRODUCTION
• Bi-directional
• Resilient
• Near real-time data collection
• Encryption
• Interoperable
• Load Shedding
• Increased efficiency
![Page 4: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/4.jpg)
SMART GRID COMPONENTS & TECHNOLOGIES
• On-demand• Renewables • Electric transport• Smart appliances • Auto Load-
balancing• Sub stations • Smart homes• Smart buildings• Smart cities
![Page 5: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/5.jpg)
SECURITY & PRIVACY
CHALLENGES
Large number
of access
points
Renewable
energy systems
entry points
Electricity theft
Most
equipment
privately owned
Lacking
standisation
Security an
afterthought
![Page 6: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/6.jpg)
LOGIC CONTROLLERS PLC
• Programmable
• Provides the logic for
automation
• High value target
• Stuxnet
• Weak Link
![Page 7: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/7.jpg)
SOLAR & WIND
• Crucial for the Paris Accord
• Load management
• Climate change
• Many vendors
• Not much security testing
![Page 8: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/8.jpg)
SMART ELECTRIC METERS
• Mandatory in some EU countries
• Mandatory in some US areas
• Privacy concerns
• Can be refused in NL
• Security concerns
• No cyber security testing
requirements
![Page 9: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/9.jpg)
OPEN AUTOMATED DEMAND RESPONSE
• North America
• Interoperability
management
• Pricing
• Demand
• Controls all components
• Zero security
![Page 10: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/10.jpg)
CAN I HACK A HOUSE?
• Smart Appliances
• Washing Machines
• Refrigerators
• Smart plugs
• Smart lighting
• Smart House
![Page 11: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/11.jpg)
CONCLUSION
• Proactivity
• Security testing
•Don’t assume its
okay
•Connect after
assessment
• Prepare for attack
13 days later
Your strategic supply is gone!
GAMEOVER
![Page 12: INSIGHTS INTO HACK ATTACKS ON SMART GRID & THE USA … · •Previous script kiddie hacking the US Government. ... •On-demand •Renewables •Electric transport •Smart appliances](https://reader035.vdocument.in/reader035/viewer/2022070906/5f768b30a77b7d3d713a2c18/html5/thumbnails/12.jpg)
QUESTIONS & THANK YOU
• @SecEvangelism
• Hacking the World with OSINT & Censys – Released next week
• Down the Rabbit Hole an OSINT Journey, Author
When the internet gives you remotely exploitable systems, take them.
They’re like free samples, right?
- Chris Kubecka