A few links on various OT Security topics

Papers

• To kill a centrifuge
  • SHA256, 20230321: cccc53ec81ac7c0755fc50d8169631d9f320dd7ebfa238bce49e93574cffb479 to-kill-a-centrifuge.pdf
• Analysis of the Cyber Attack on the Ukrainian Power Grid
  • SHA256, 20230321: 945b431a136dfb2209942f28de02f277af7b0c9b6e8de4c5e4e23d3c88119ca5 E-ISAC_SANS_Ukraine_DUC_5.pdf
  • Weitere Links zum Thema:
    • https://www.globalsign.com/en/blog/cyber-autopsy-series-ukranian-power-grid-attack-makes-history
    • https://www.wired.com/2016/03/inside-cunning-unprecedented-hack-ukraines-power-grid/

Incidents

• Heating Finland 2016
  • https://securityledger.com/2016/11/lets-get-cyberphysical-ddos-attack-halts-heating-in-finland/
  • https://www.spiegel.de/netzwelt/web/finnland-hacker-schalten-heizungen-aus-a-1120234.html
  • https://www.wired.com/2016/03/inside-cunning-unprecedented-hack-ukraines-power-grid/
• Polish Trams 2008
  • https://www.schneier.com/blog/archives/2008/01/hacking_the_pol.html
  • https://www.darkreading.com/perimeter/teenage-hacker-takes-over-polish-tram-system
  • https://www.wired.com/2008/01/polish-teen-hac/
  • https://www.theregister.com/2008/01/11/tram_hack/
• KA Sat 2022
  • https://www.golem.de/news/satellitennetzwerk-ka-sat-viasat-untersucht-moeglichen-cyberangriff-auf-systeme-2203-163515.html
  • https://www.golem.de/news/ukraine-krieg-tausende-deutsche-windraeder-ohne-satelliten-kommunikation-2202-163499.html
  • https://news.sky.com/story/satellite-giant-viasat-probes-suspected-broadband-cyberattack-amid-russia-fears-12554004
• Florida Water Treatment Plant
  • https://www.industrialdefender.com/blog/florida-water-treatment-plant-cyber-attack
  • https://www.wired.com/story/oldsmar-florida-water-utility-hack/
  • https://www.forbes.com/sites/leemathews/2021/02/15/florida-water-plant-hackers-exploited-old-software-and-poor-password-habits/

Official Recommendations

• CISA: Cybersecurity Best Practices for Industrial Control Systems
• BSI: ICS Security Kompendium
• CISA: Improving Security of Open Source Software in Operational Technology and Industrial Control Systems
• NIST: Guide to Operational Technology (OT) Security
• White House: National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems
• CISA: ICS Recommended Practices