Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of...

18
Security challenges in Industry 4.0 Stefano Zanero, PhD Associate Professor, Politecnico di Milano

Transcript of Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of...

Page 1: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Security challenges in Industry 4.0

Stefano Zanero, PhD

Associate Professor, Politecnico di Milano

Page 2: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

What is the Internet of Things

Industrial world of connected CPS

Page 3: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Welcome to the IoIT (Industrial Things)

Originally-disconnected systems now “opening” to the Internet

Critical infrastructure and safety-critical systems

(sometimes) no humans in the middle

→ Influence environment and humans (≠ data security!)

Page 4: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero Security of Industry 4.0

ICS on the Internet

Page 5: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

What is the Internet of Things

Modern factory

Page 6: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

What is the Internet of Things

Modern robots are meant to be connected

Page 7: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Page 8: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Factories (and robots) ARE connected

Brand Overall Auth. Disabled

eWON 2,800 1,160

Welotec 1 0

Moxa 12,300 2,300

Virtual Access 260 0

Belden 500 0

Westermo 4,000 1,200

NetModule 530 135

Eurotech 0 -

InHand 608 0

Digi 1,200 0

Robustel 2,900 0

Sierra Wireless

0 0

Page 9: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Threat scenarios

1) Production Plant Halting (“up to 20,000$/min”)

2) Production Outcome Alteration

3) Physical Damage

4) Unauthorized Access

And, of course, there is the ransomware scheme, but that’s not too interesting in the era of “oh, I could ransom that, too!”

Find detailed scenarios on http://robosec.org

Page 10: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Industrial routers research results

Information disclosure (way too verbose banners, detailed technical material)

Outdated everything (kernel, compilers, libraries, …)

Weak \ known \ static credentials

Poor or misconfigured transport encryption (e.g., VPN with static auth keys, pre-generated certs, …)

Insecure web interface (no input sanitization… and even security critical code copied straight from blog posts!)

No better than consumer IoT devices!

Read the full research report at http://robosec.org

Page 11: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Non-financial and state-sponsored threats

Page 12: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Businesses on the front line

Shamoon targeted critical files from a specific company (Saudi Aramco)

Targeted attack using signed driver component

Overwrote critical files on 30.000 machines (¾) on the corporate network with a burning American flag

Claimed by unknown “Cutting Sword of Justice” group on Pastebin

Page 13: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Attacks against ICS share some characteristics

2014: Steel mill incident– Spear phishing leads to compromise of corporate network– Pivot into plant network– Exploitation phase (compromise network controllers)

23rd December 2015: Ukraine power outage– Black energy malware– Spear phishing leads to compromise of corporate network– BlackEnergy malware steals VPN credentials– Pivot into plant networks– Exploitation phase (modification of UPS controller firmware)

Page 14: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

The rise of targeted attacks against SME

Source: Symantec Internet Security Threat Report 2016

Page 15: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Sometimes, even untargeted attacks...

Page 16: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Sometimes, even untargeted attacks...

Page 17: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Sometimes, even untargeted attacks...

Page 18: Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Stefano Zanero

Questions?

Thank you for your attention!

You can reach me at [email protected]

Or just tweet @raistolo


SPEAR & JACKSON

SPEAR & JACKSON

SPEAR 2009

SPEAR 2009

Simulation of Network Enabled Weapons and SPEAR Strike

Simulation of Network Enabled Weapons and SPEAR Strike

Avoidable Mistakes that Compromise Cooling Performance in Data Centers and Network Rooms

Avoidable Mistakes that Compromise Cooling Performance in Data Centers and Network Rooms

20140623 - Network Virtualization · Network Virtualization & the Internet2 Innovation Platform To keep our community at the “tip of the spear”, how can we support network virtualization?

20140623 - Network Virtualization · Network Virtualization & the Internet2 Innovation Platform To keep our community at the “tip of the spear”, how can we support network virtualization?

Phishing for Wire Transfers · Email Compromise (BEC), is a more targeted variation of spear phishing aimed at high-profile executives or personnel who manage wire transfers. According

Phishing for Wire Transfers · Email Compromise (BEC), is a more targeted variation of spear phishing aimed at high-profile executives or personnel who manage wire transfers. According

Top Spear Phishing Keywords Used in Attacks | FireEye · Top Words Used in Spear Phishing Attacks Successfully Compromise Enterprise Networks and Steal Data Executive Summary Aided

Top Spear Phishing Keywords Used in Attacks | FireEye · Top Words Used in Spear Phishing Attacks Successfully Compromise Enterprise Networks and Steal Data Executive Summary Aided

Common Points of Compromise Detection Using Network Analysis · 2020. 3. 30. · 1 Paper 4521-2020 Common Points of Compromise Detection Using Network Analysis Prathaban Mookiah,

Common Points of Compromise Detection Using Network Analysis · 2020. 3. 30. · 1 Paper 4521-2020 Common Points of Compromise Detection Using Network Analysis Prathaban Mookiah,

shakes spear

shakes spear

Spear-Phishing Email: Most Favored APT Attack Bait · PAGE 2 | SPEAR-PHiSHiNG EMAiL: MOST FAVORED APT ATTACK BAiT spear-phIshIng attaCk IngredIents The Email In a spear-phishing attack,

Spear-Phishing Email: Most Favored APT Attack Bait · PAGE 2 | SPEAR-PHiSHiNG EMAiL: MOST FAVORED APT ATTACK BAiT spear-phIshIng attaCk IngredIents The Email In a spear-phishing attack,

The Network Workbench: Network Simulation Software for ...mpullen/JNW2/Pullen... · concluded that a network simulation environment represents the best compromise between the problems

The Network Workbench: Network Simulation Software for ...mpullen/JNW2/Pullen... · concluded that a network simulation environment represents the best compromise between the problems

First Spear

First Spear

Rel Spear Manual

Rel Spear Manual

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

Spear Street

Spear Street

dftubular p4&1(outside) - Fencing and Gates Sydney · Federation Spear Dog Bars Oxley Spear Spear Top Scollop Spear Top Scollop Bar Spear Top, Arched Bar with S Scrolls ... dftubular_p4&1(outside)

dftubular p4&1(outside) - Fencing and Gates Sydney · Federation Spear Dog Bars Oxley Spear Spear Top Scollop Spear Top Scollop Bar Spear Top, Arched Bar with S Scrolls ... dftubular_p4&1(outside)

Spear, J. 1 JOANNA SPEAR POSITION: Director of the Security ...

Spear, J. 1 JOANNA SPEAR POSITION: Director of the Security ...

Bale Spear - Land Pride · Applies to BSR10 Bale Spear, BSR20 Bale Spear, BSR30 Bale Spear, BSR40 Bale Spear The Part Number Index is a numeric index of all part numbers included

Bale Spear - Land Pride · Applies to BSR10 Bale Spear, BSR20 Bale Spear, BSR30 Bale Spear, BSR40 Bale Spear The Part Number Index is a numeric index of all part numbers included

Cisco Intelligent WAN (IWAN) Right-size your Network without Compromise

Cisco Intelligent WAN (IWAN) Right-size your Network without Compromise

SPPF foundation - Planning Web viewDevelopment should not compromise achievement of infrastructure and transport network development plans where this would compromise meeting long-term

SPPF foundation - Planning Web viewDevelopment should not compromise achievement of infrastructure and transport network development plans where this would compromise meeting long-term