Posts by ILB56 3 publicly visible posts • joined 29 Oct 2011
The systems ARE connected to the Internet and were compromised by someone on the inside playing a Facebook game.
If they weren't connected to the Internet, it would be completely irrelevant if they were compromised by USB sticks because nobody would be able to retrieve data or take control of systems.
The problem is almost ENTIRELY technical. Stuxnet targeted 4 ZERO DAY VULNERABILITIES. It doesn't matter what "behaviors" are when systems are as absurdly vulnerable as all of them are. Creating networks that are not connected to the Internet in any capacity would entirely solve the problem. Only someone physically entering your facility, physically accessing your computers, and downloading information to a portable media device, would compromise your data. And that is a physical security issue - not a technical one.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
