[B! SCADA] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

SCADAã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ—ãƒ¬ã‚¹ç™ºè¡¨ã€€åˆ¶å¾¡æ©Ÿå™¨ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
IPAï¼ˆç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ã€ç†äº‹é•·ï¼šè—¤æ±Ÿ ä¸€æ£ï¼‰ã¯ã€è¤‡æ•°ã®åˆ¶å¾¡æ©Ÿå™¨ã®è„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰æ€§æƒ…å ±ã®å…¬è¡¨ã‚’å—ã‘ã€åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ é‹ç”¨è€…ã«æ³¨æ„ã‚’å‘¼ã³ã‹ã‘ã‚‹ãŸã‚ã€æ³¨æ„å–šèµ·ã‚’ç™ºã™ã‚‹ã“ã¨ã¨ã—ã¾ã—ãŸã€‚ å¾“æ¥ã€åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã¯å¤–éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«æŽ¥ç¶šã•ã‚Œã¦ã„ãªã„ãŸã‚ã€æ¯”è¼ƒçš„å®‰å…¨ã¨è€ƒãˆã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã—ã€åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã¯ã‚ªãƒ¼ãƒ—ãƒ³åŒ–ã‚„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯åˆ©ç”¨ãŒé€²ã¿ã¤ã¤ã‚ã‚Šã€ã¾ãŸåˆ¶å¾¡æ©Ÿå™¨è‡ªä½“ã®è„†å¼±æ€§ã‚‚ç™ºè¦‹ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã€åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã¸ã®ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚‚ç¾å®Ÿã®ã‚‚ã®ã«ãªã‚Šã¤ã¤ã‚ã‚Šã¾ã™ã€‚ 2012å¹´1æœˆã«ã¯ã€å·¥å ´ã®ç”Ÿç”£ãƒ©ã‚¤ãƒ³ã€é›»åŠ›ã‚„åŒ–å¦ãƒ—ãƒ©ãƒ³ãƒˆã€é‡è¦ã‚¤ãƒ³ãƒ•ãƒ©ç‰ã§ä½¿ç”¨ã•ã‚Œã‚‹è¤‡æ•°ç¤¾ã®åˆ¶å¾¡æ©Ÿå™¨PLCï¼ˆProgrammable Logic Controllerï¼‰ã«ãŠã„ã¦ã€è¤‡æ•°ã®è„†å¼±æ€§ï¼ˆãƒãƒƒã‚¯ãƒ‰ã‚¢ã€æš—å·ã‚„èªè¨¼ä¸è¶³ã€å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç‰ï¼‰ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ URLï¼šã€€http://www.us-cert.gov/control_syste
mi1kman 2012/03/02
ã€Œç±³å›½ICS-CERT(*2)ã®æ³¨æ„å–šèµ·ã«ã‚ˆã‚Œã°ã€æ—¥æœ¬ãŠã‚ˆã³æ¬§ç±³ã®ãƒ¡ãƒ¼ã‚«ãƒ¼ã®5ç¤¾ã€6è£½å“ã«ã¤ã„ã¦æ”»æ’ƒã«æ‚ªç”¨å¯èƒ½ãªå®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ã€

åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ

è„†å¼±æ€§

SCADA
ãƒªãƒ³ã‚¯
åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã®è„†å¼±æ€§æ‚ªç”¨æ”»æ’ƒã«è¦æˆ’ã‚’ã€IPAãŒæ³¨æ„å–šèµ·
è¤‡æ•°ãƒ¡ãƒ¼ã‚«ãƒ¼ã®SCADAã‚·ã‚¹ãƒ†ãƒ ã«é–¢ã™ã‚‹è„†å¼±æ€§æƒ…å ±ãŒå…¬é–‹ã•ã‚Œã€æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ãŒä¼æ¥ã‚„çµ„ç¹”ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ç¢ºèªã‚’æ€¥ãã‚ˆã†å‘¼ã³æŽ›ã‘ã¦ã„ã‚‹ã€‚ æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆIPAï¼‰ã¯2æœˆ29æ—¥ã€å…¬å…±ã‚¤ãƒ³ãƒ•ãƒ©ã‚„å·¥å ´ã®ç”Ÿç”£ãƒ©ã‚¤ãƒ³ãªã©ã®ç®¡ç†ã«ä½¿ç”¨ã•ã‚Œã‚‹åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã«é–¢ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’ç™ºè¡¨ã—ãŸã€‚è¤‡æ•°ãƒ¡ãƒ¼ã‚«ãƒ¼ã®åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ è£½å“ã«å˜åœ¨ã™ã‚‹è„†å¼±æ€§æƒ…å ±ã¨ã‚³ãƒ³ã‚»ãƒ—ãƒˆå®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ãŒç±³å›½ã§å…¬é–‹ã•ã‚Œã€IPAã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ç¢ºèªã‚’æ€¥ãã‚ˆã†æ±‚ã‚ã¦ã„ã‚‹ã€‚ ç±³ICS-CERTã«ã‚ˆã‚‹ã¨ã€è©²å½“ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã¯General Electricã®ã€ŒD20/D20Mã€ã€Rockwell Automationã®ã€ŒAllen-Bradley ConrolLogixã€ã€ŒAllen-Bradley MicroLogixã€ã€Schneider Electricã®ã€ŒModicon Quantumã€ã€Koyoã®ã€ŒDirect LOGIC H4-ESã€ã€Schweit
mi1kman 2012/03/02
åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ

è„†å¼±æ€§

IPA

SCADA
ãƒªãƒ³ã‚¯
æµ·å¤–ã«ãŠã‘ã‚‹å€‹äººæƒ…å ±æµå‡ºäº‹ä»¶ã¨ãã®å¯¾å¿œã€Œæ¨™çš„ã¯é‡è¦ã‚¤ãƒ³ãƒ•ãƒ©ã€ç‹™ã‚ã‚Œã‚‹SCADAã‚·ã‚¹ãƒ†ãƒ ã€ï¼ˆ1ï¼‰åã©ã‚‚ã§ã‚‚SCADAä¾µå…¥ã¯å¯èƒ½ | ScanNetSecurity
mi1kman 2011/12/21
SCADA
ãƒªãƒ³ã‚¯
æ°´é“ã‚¤ãƒ³ãƒ•ãƒ©ã®éšœå®³ã€ã€Œã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã§ã¯ãªã„ã€ã¨ç±³å½“å±€
ç±³å›½åœŸå®‰å…¨ä¿éšœçœï¼ˆDHSï¼‰ã®ãƒã‚´ï¼ˆ2009å¹´10æœˆ6æ—¥æ’®å½±ï¼‰ã€‚(c)AFP/Maria Belen PEREZ GABILONDO ã€11æœˆ26æ—¥ AFPã€‘ç±³ã‚¤ãƒªãƒŽã‚¤ï¼ˆIllinoisï¼‰å·žã®æ°´é“æ–½è¨ã§ä»Šæœˆç™ºç”Ÿã—ãŸéšœå®³ã®åŽŸå› ã¯æµ·å¤–ã‹ã‚‰ã®ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã ã¨ã„ã†å ±å‘Šã«ã¤ã„ã¦ã€ç±³æœæŸ»å½“å±€ã¯24æ—¥ã¾ã§ã«ã€ŒåŽŸå› ã¯ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã§ã¯ãªã„ã€ã¨ã®çµè«–ã‚’ä¸‹ã—ãŸã€‚ ã“ã®ä»¶ã§ã¯å‰é€±ã€ç±³ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ä¼šç¤¾ã€Œã‚¢ãƒ—ãƒ©ã‚¤ãƒ‰ãƒ»ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ãƒ»ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ï¼ˆApplied Control Solutionsï¼‰ã€ã®ã‚¤ãƒ³ãƒ•ãƒ©ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ å°‚é–€å®¶ã€ã‚¸ãƒ§ãƒ¼ãƒ»ãƒ¯ã‚¤ã‚¹ï¼ˆJoe Weissï¼‰æ°ãŒã€ã‚¤ãƒªãƒŽã‚¤å·žå…¨åŸŸãƒ†ãƒãƒªã‚ºãƒ ãƒ»æƒ…å ±ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆIllinois Statewide Terrorism and Intelligence Centerï¼‰ã®æƒ…å ±ã‚’å¼•ç”¨ã—ã€ãƒãƒƒã‚«ãƒ¼ã«ã‚ˆã‚‹æ”»æ’ƒã®ç–‘ã„ãŒã‚ã‚‹ã¨å ±å‘Šã—ã¦ã„ãŸã€‚ ç±³å›½åœŸå®‰å…¨ä¿éšœçœï¼ˆDHSï¼‰ã®ã‚¯
mi1kman 2011/11/30
ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒ

SCADA
ãƒªãƒ³ã‚¯
after Stuxnetâ€•â€•æ¿€å¤‰ã—ãŸåˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– | RBB TODAY
ã‚¤ãƒ©ãƒ³ã®æ ¸é–‹ç™ºè¨ˆç”»ã‚’æ··ä¹±ã•ã›ãŸã“ã¨ã§è©±é¡Œã¨ãªã£ãŸStux netã€‚åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã®æ¥ç•Œã§ã¯ã€Stux netå‰ã¨Stux netå¾Œã®ä¸–ç•Œã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è€ƒãˆæ–¹ã‚’æ ¹æœ¬ã‹ã‚‰è¦‹ç›´ã•ãªã‘ã‚Œã°ãªã‚‰ãªãã£ãªãŸã¨ã„ã†ã€‚å…·ä½“çš„ã«ã©ã†å¤‰ã‚ã£ãŸã®ã‹ã€ã©ã‚“ãªå¯¾ç–ãŒã‚ã‚‹ã®ã‹ã€ä»Šå¾Œã©ã†ãªã£ã¦ã„ãã®ã‹ã€‚ ãã‚“ãªç–‘å•ã«å¿œãˆã‚‹ã¹ãã€ã€Œã‚‚ã®ã¥ãã‚ŠNEXT 2011ã€ã§è¡Œã‚ã‚ŒãŸå°‚é–€ã‚»ãƒŸãƒŠãƒ¼ã‚’ã‚‚ã¨ã«ã€ç™ºè¡¨è€…ã¸ã®ãƒ’ã‚¢ãƒªãƒ³ã‚°ã‚’äº¤ãˆãŸå†…å®¹ã‚’ã¾ã¨ã‚ã¦ã¿ãŸã„ã€‚ ã‚»ãƒŸãƒŠãƒ¼ã®è¬›æ¼”è€…ã¯ã€JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆJPCERT/CCï¼‰æƒ…å ±æµé€šå¯¾ç–ã‚°ãƒ«ãƒ¼ãƒ— ãƒžãƒãƒ¼ã‚¸ãƒ£ãƒ¼ å¤ç”°æ´‹ä¹…æ°ã§ã‚ã‚‹ã€‚ â—åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã®ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã¯ç¾å®Ÿã®ã‚‚ã®ã« å¤ç”°æ°ã«ã‚ˆã‚Œã°ã€2000å¹´ã”ã‚ã¾ã§åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã¨ã¯ç„¡ç¸ã¨ã„ãˆã‚‹çŠ¶æ…‹ã ã£ãŸã¨ã„ã†ã€‚ã‚·ã‚¹ãƒ†ãƒ ã¯ç‹¬è‡ªã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãŠã‚ˆã³ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§æ§‹æˆã•ã‚Œã€ä»–ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨æŽ¥ç¶šã•ã‚Œã‚‹ã“ã¨ã¯ãªãã€å®Œå…¨ã«é–‰ã˜
mi1kman 2011/11/29
åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ

SCADA
ãƒªãƒ³ã‚¯
0-Day SCADA Exploits Publicly Exposed by Italian researchers
Reach out to get featuredâ€”contact us to send your exclusive story idea, research, hacks, or ask us a question or leave a comment/feedback! An Italian researcher has uncovered at least a dozen security flaws in software used in utilities and other critical infrastructure systems, prompting security advisories from the U.S. government. Security researcher Luigi Auriemma disclosed the attacks against
mi1kman 2011/09/18
SCADA

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Researcher discloses zero-day flaws in SCADA systems
mi1kman 2011/09/17
SCADA

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
æ—¥åˆŠå·¥æ¥æ–°èž é›»åç‰ˆ
mi1kman 2011/08/21
çµŒæ¸ˆç”£æ¥çœ

åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ

SCADA
ãƒªãƒ³ã‚¯
New Siemens SCADA Vulnerabilities Kept Secret - Schneier on Security
mi1kman 2011/05/25
SCADA

è„†å¼±æ€§

Bruce Schneier
ãƒªãƒ³ã‚¯
nsslabs.comÂ -Â nsslabs ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
mi1kman 2011/05/25
SCADA

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
http://news.infracritical.com/pipermail/scadasec/2011-May/019934.html
mi1kman 2011/05/25
SCADA

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Siemensã®SCADAã‚·ã‚¹ãƒ†ãƒ ã«æ–°ãŸãªè„†å¼±æ€§ã‹ã€€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒæƒ…å ±å…¬é–‹
ã€ŒStux netã€æ”»æ’ƒã§ç‹™ã‚ã‚ŒãŸSiemensã®SCADAã‚·ã‚¹ãƒ†ãƒ ã«ã€æ·±åˆ»ãªè„†å¼±æ€§ãŒæ–°ãŸã«è¦‹ã¤ã‹ã£ãŸã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒä¼ãˆã¦ã„ã‚‹ã€‚ ç”£æ¥ç”¨ã‚¤ãƒ³ãƒ•ãƒ©ç®¡ç†ã«ä½¿ã‚ã‚Œã‚‹Siemensã®SCADAã‚·ã‚¹ãƒ†ãƒ ã«æ–°ãŸãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã¨ä¼ãˆã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§çµŒç·¯ã‚’å…¬è¡¨ã—ã€Siemensã®å¯¾å¿œã‚’æ‰¹åˆ¤ã—ãŸã€‚ ã“ã®è„†å¼±æ€§ã¯ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥NSS Labsã®ç ”ç©¶è€…ãƒ‡ã‚£ãƒãƒ³ãƒ»ãƒ™ãƒ¬ã‚¹ãƒ•ã‚©ãƒ¼ãƒ‰æ°ãŒç™ºè¦‹ã—ãŸã‚‚ã®ã§ã€åŒç¤¾ã¯5æœˆ18æ—¥ä»˜ã®ãƒ–ãƒã‚°ã§ã€Œç”£æ¥åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã®é‡å¤§ãªè„†å¼±æ€§ãŒæ–°ãŸã«è¦‹ã¤ã‹ã£ãŸã€ã¨å ±å‘Šã—ãŸãŒã€å…·ä½“çš„ãªå†…å®¹ã¯ä¼ã›ã¦ã„ãŸã€‚ ã—ã‹ã—ã€ãƒ™ãƒ¬ã‚¹ãƒ•ã‚©ãƒ¼ãƒ‰æ°ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«å¯„ã›ãŸ23æ—¥ã®æŠ•ç¨¿ã§ã€ã“ã®è„†å¼±æ€§ãŒSiemensã®ã‚·ã‚¹ãƒ†ãƒ ã«å˜åœ¨ã™ã‚‹ã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ã€Œç”£æ¥åˆ¶å¾¡ã‚·ã‚¹ãƒ†ãƒ ã«åŠã¼ã™æ½œåœ¨çš„ãƒªã‚¹ã‚¯ã¯å¤§ããã€ä¸–ç•Œä¸ã®å…¨ã¦ã®å·¥æ¥å›½ã«åºƒãå½±éŸ¿ãŒåŠã¶ã€ã¨è¦å‘Šã—ã¦ã„ã‚‹ã€‚ åŒæ°ãŒ
mi1kman 2011/05/25
SCADA

è„†å¼±æ€§

NSS Labs
ãƒªãƒ³ã‚¯
Hackers tap SCADA vuln search engine
A search engine that indexes servers and other internet devices is helping hackers to find industrial control systems that are vulnerable to tampering, the US Computer Emergency Readiness Team has warned. The year-old site known as Shodan makes it easy to locate internet-facing SCADA, or supervisory control and data acquisition, systems used to control equi pment at gasoline refineries, power plant
mi1kman 2010/11/25
Stuxnet

SCADA

ã‚¦ã‚¤ãƒ«ã‚¹
ãƒªãƒ³ã‚¯
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.. View Community Sessions VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.. View Community Sessions VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.
mi1kman 2010/11/25
Stuxnet

ã‚¦ã‚¤ãƒ«ã‚¹

SCADA
ãƒªãƒ³ã‚¯
AusCERT - Malware targeting Siemens SCADA
mi1kman 2010/07/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

SCADA
ãƒªãƒ³ã‚¯
1