The US Food and Drug Administration (FDA) published Content of Premarket Submissions for Management of Cybersecurity in Medical Devices. We haven’t had time to read it yet, but take a look at Patrick Coyle’s analysis. Pull quote, “Interestingly, in this section the FDA specifically abdicates responsibility for cybersecurity system updates, noting that: ‘The FDA typically will not need to review or approve medical device software changes made solely to strengthen cybersecurity.’”
Oops. Bloomberg reporter Jordan Robertson, who has written good articles on ICSsec, was led astray on ICS honeypot data by ThreatStream. Chattanooga appearing so high on the list should have been a red flag. This is a great cautionary tale with CSO covering the analysis flaws. ThreatStream made matters worse with “The scans were on tcp port 102 and the requests were mostly protocol compliant. Siemens utilizes port 102 … We are not familiar with other services that use this port.” ICCP, other iso-tsap …
Bob Radvanovsky and the Project Shine team have posted a paper showing the results of their search for Internet connected ICS devices. Great work by this volunteer team. It raised awareness for a lot of asset owners to look and pull these connections. It may also have encouraged John Matherly to add ICS scanning capabilities to Shodan. It is now so fast that Shodan has integrated and scanned for ICS devices within days of a Project Redpoint release.
If you want more on Internet connected PLC’s, read Distinguishing Internet-Facing ICS Devices Using PLC Programming Information by Paul Williams at AFIT.
Stephen Hilt’s presentation from DerbyCon on Project Redpoint is up on YouTube.
On October 11th Altamira is running a CTF called Scram Hackathon 2.0. The goal is to cause a nuclear power plant scram, emergency shutdown. (ht: Paul Asadoorian’s Security Weekly)
A near complete agenda is now up for the ICS Cyber Security Conference, Oct 20-23 in Atlanta, GA. Can we call it WeissCon for one more year even though Joe sold the event?
ISA99 Co-Chair Eric Cosman put together all of the work the committee has done on ICS cyber security. Eric wrote “the sum-total of our work to date, weighs in at slightly less than 900 letter sized pages, with a file size of just over 20MB.”
SSI Software and Technology acquired 60% of S21sec. S21sec is one of the largest ICS security consultancies in Spain, and perhaps in Europe. Schneider Electric is also a minority shareholder.
ARC Advisory Group continues to promote anytime, anywhere, any device control of an ICS. The latest is in their work with/for ICONICS mobile app. “While this is largely driven by the new Millennial generation of workers, most stakeholders are beginning to embrace smartphones, tablets, ‘phablets,’ and other mobile devices to access manufacturing processes, information and intelligence at any time from any location with wireless or cellular access.”