Access "Critical infrastructure protection hindered by difficulties, experts say"
This article is part of the Dec. 2012/Volume 14 / No. 10 issue of Market for vulnerability information grows
In 2010 security researchers uncovered a complex piece of malware that infiltrated the systems of an Iranian uranium enrichment facility. Once it penetrated the outer wall of the facility—presumably by simply being plugged into a Windows system via a thumb drive—Stuxnet was designed to cause serious damage, targeting the Natanz-based facility's industrial control system. It was programmed with one goal: Disrupt the nuclear enrichment processes by slightly altering conditions at the facility. The malware, which targeted four Windows zero-day vulnerabilities, was later tied to the United States and Israel. While both countries have neither confirmed nor denied a role in the attack, most experts agree that it represented the first time nation-states are believed to have unleashed a cyberweapon with destructive capabilities. The attack brought the issue of critical infrastructure protection to a fevered pitch with cyberwarfare and cyberespionage activities frequently making front page headlines. The owners of power generation, water utilities, oil and chemical ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
Firm pushes software security testing with fugitive tracking system
by Robert Westervelt, News Director
System that helps law enforcement track down fugitives was tested thoroughly to prove to CTOs and IT teams that the company is serious about security.
-
Critical infrastructure protection hindered by difficulties, experts say
by Robert Westervelt, News Director
Information Security magazine discussed critical infrastructure protection with three experts and explore whether any near-term solutions can be implemented to bolster network defenses.
-
Firm pushes software security testing with fugitive tracking system
by Robert Westervelt, News Director
-
-
Private market growing for zero-day exploits and vulnerabilities
by Robert Lemos, Contributor
Exploitable vulnerabilities are becoming harder to find in popular software, but information on such flaws is increasingly valuable, and many security researchers are no longer willing to give it up for free.
-
Biometric authentication methods: Comparing smartphone biometrics
by David Jacobs, Contributor
Biometric authentication helps ensure only authorized smartphone users can access a network. David Jacobs weighs the pros and cons of three methods.
-
Private market growing for zero-day exploits and vulnerabilities
by Robert Lemos, Contributor
-
Columns
-
Emerging vulnerability markets, mobile biometrics prompt security concerns
by Robert Richardson
Information Security Magazine examines key security concerns in the field of critical infrastructure protection and explores options for mobile biometric authentication because you’ll need to think about a new security strategy as mobile devices outnumber desktops in the enterprise.
-
Chief information security officer skills go beyond customary technical roles
by Matthew Todd
A trusted advisor and a strong communicator and promoter, a good CISO should be a jack-of-all-trades to rally the IT security team to support the business needs by minimizing risk.
-
Marcus Ranum chat: Network threat detection and wireless attacks
by Marcus Ranum
Security expert and Information Security magazine columnist goes one-on-one with Aaron Turner, co-founder of security consulting firm N4Struct.
-
Emerging vulnerability markets, mobile biometrics prompt security concerns
by Robert Richardson
More Premium Content Accessible For Free
Compliance and risk modeling
E-Zine
You can fight compliance or embrace it, but one way or the other, you can’t escape it. Increasingly, smart organizations are not just accepting ...
Essentials: Threat detection
E-Zine
Antivirus and intrusion prevention aren’t the threat detection stalwarts they used to be. With mobile endpoints and new attack dynamics, enterprises ...
Managing identities in hybrid worlds
E-Zine
The world in which successful IAM programs must be implemented is increasingly complex, a mix of legacy on-premise IAM infrastructures, cloud-based ...