SCADA Security: What's Broken and How To Fix It

Modern attacks routinely breach SCADA networks that are defended to IT standards. This is unacceptable. Defense in depth has failed us.In "SCADA Security" Ginter describes this failure and describes an alternative. Strong SCADA security is possible, practical, and cheaper than failed, IT-centric, defense-in-depth.While nothing can be completely secure, we decide how high to set the bar for our attackers. For important SCADA systems, effective attacks should always be ruinously expensive and difficult.We can and should defend our SCADA systems so thoroughly that even our most resourceful enemies tear their hair out and curse the names of our SCADA systems' designers.

Andrew Ginter is the VP Industrial Security at Waterfall Security Solutions. He spent 25 years leading the development of commercial products for SCADA systems, IT/OT middleware and SCADA security. He holds degrees in Applied Mathematics and Computer Science from the University of Calgary, as well as ISP, ITCP, and CISSP accreditations.