Testing Scada Networks

SCADA is of course the protocol that utilities such as gas, electric, and telecoms use to control the equipment they have to manage. Think of a simple way to check a temperature or voltage reading and report back as well as set values on switches, pumps, etc. It’s easy.  In the olden days SCADA devices were connected by phone lines and dedicated circuits. Today of course they are connected to IP networks that are often also connected to the Internet.  Just to get a feeling for the type of device that can be controlled via SCADA check out this awesome movie of an electrical gate being tripped.
I grabbed a chance to talk to Kowsik Guruswamy  CTO and co-founder of MuSecurity, because they have recently added SCADA to the list of protocols they can test with their product.  MuSecurity sells hardware appliances that can launch attacks against devices on the network to discover how they react to thousands of anomalous packets. They basically discover zero day vulnerabilities. Their primary customers are IT security departments who are evaluating different solutions, and security vendors that want to improve their products.  Now they can also be used to check the robustness of things on the power grid for instance. Listen to the threatcast with Kowsik here. Note that he points out a scary situation. SCADA protocols are based in part on RPC DCOM, an infamous protocol that has been attacked by many worms.  That does not make me feel good.