Monday, September 27, 2010

STUXNET

The only thing I can say is that it's
something designed to go bang...


Boned Jello

... Stuxnet was built by a very sophisticated and capable attacker -- possibly a nation state -- and it was designed to destroy something big ... .

The worm actually looks for very specific Siemens settings -- a kind of fingerprint that tells it that it has been installed on a very specific Programmable Logic Controller (PLC) device -- and then it injects its own code into that system.


...  when Stuxnet finally identifies its target, it makes changes to a piece of Siemens code called Organizational Block 35. This Siemens component monitors critical factory operations -- things that need a response within 100 milliseconds. By messing with Operational Block 35, Stuxnet could easily cause a refinery's centrifuge to malfunction, but it could be used to hit other targets too, Byres said. "The only thing I can say is that it is something designed to go bang," he said. [Full]

I'm absolutely fascinated by this.  It's a certainty that the winning side in the next great world war  (if it hasn't already begun) will  prevail with cybertoge.  Nerds rule the universe.  Awk!

4 comments:

Paul C said...

The Nuke Plant didn't vapourize into the Iranian desert, somewhat of a cyberstrike failure, too bad.

TimO said...

Getting the factory end-products unusable and thereby getting the factory heads lined up against the wall and shot are MUCH more effective than making something go boom....

Steve in Greensboro said...

Just thinking it's in there will make the control room guys real careful.

Paul C said...

Shooting factory heads is all well in good, how much more effective is worth debate sure. The infrastructure is still standing though the fact it wasn't reduced to Cherynobl status and rendered useless is a shame. This is a mere bump in the road and will only serve as delay, I find a smoking hole in the ground in this case beats smoking hole in a head. That would have been effective cybertoge at least as far as I'm concerned.

Post a Comment

Just type your name and post as anonymous if you don't have a Blogger profile.