Control System Malware Now A Reality
Each and every day hackers and cyber criminals move forward in stepping up their efforts to infiltrate various systems and perform various actions. The latest insidious piece of malware is spread by simple utility which makes our lives easier, the USB flash drives and other related USB devices. USB devices or recognize very easily by current computing systems as they have the ability to connect as well as power a system at the same time. USB devices are normally very small in size and lend portability. Unfortunately, the latest piece of malware uses these devices to infiltrate systems and steal information in the utility plants and manufacturing sectors we depend on.
The Stuxnet worm, as it has been called, replicates itself through vulnerability in Windows shortcut files. This exploit does not require any user intervention in order to spread itself. Any other type of storage devices that are removable can be infected. They then infect other machines when they are connected to them. There is a root kit in the malware which keeps the user from detecting any system compromises. Once malicious software finds the information it seeks, encodes the data and then uploads it to a server in another location. Countries that have been hit the hardest by this exploit include Iran, India, the United States, and Indonesia. The exact number of systems that have been hit by this is incomplete, but there is at least one customer in Germany that has moved under document located it and has not suffered any damage whatsoever. Controls and manufacturing systems are usually not Internet connected, therefore the use of USB drives as a source of infection is the best way to place the malware into a system. Researchers from Symantec Corp. state they've noticed somewhere in the range of 8000 to 9000 attempts of infection each day.
Computers have been infected and are not executing control applications will propagate the malware two USB drives and devices that are attached to the system until the entire infection has been eradicated. There is always the possibility another individual will use the vulnerability to distribute their own variant of malware it will commit much more dangerous actions and be pointed toward other systems. The malware does not escape detection by antivirus software. The current workaround devised by Microsoft will assist in protecting computer systems from the malware, but their fix alters a systems desktop icons into white icons until a more complete patch is developed. Organizations with an onboard IT staff can employ other fixes to the situation, including not allowing files not located on the C drive to execute, which would include any software files located on a USB drive.
Security experts feel this is an exploit and vulnerability that was carefully designed and intentionally constructed to be aimed at control systems of an industrial nature. This type of attack demonstrates at the current time the industry is not prepared to adequately protect and mitigate this threat. One question is being asked, his is the act of a single individual or is there a larger group at hand and who is funding it. It is also believed a larger wide scale attack of this nature can and will be exploited, in time. Right now it is being guessed that some type of industrial espionage is a driving force behind the attack. It is not known who is doing the attacking.
CISSP online training should be given in a variety of organizations and enterprises, as well as administered to users in the workplace. Everyone needs to contain a certain level of knowledge, understanding, and awareness in the realm of information security in order to thoroughly protect their systems, networks, and overall infrastructures. GCT Learning UK contains an in depth certification training course involving information security, as there is a shortage of certified and well-trained information security specialist and professionals across the entire globe. It is a very exciting and much needed career in every country of the world.
About Us: Miva Training carries a wide range of online training courses, IT certification training courses, desktop training courses, business soft skills training, and more. Project management training courses adhering to the Project Management Book of Knowledge detail the many issues and intricacies necessary for project managers and leaders to attain successful project completion and delivery. Many other training courses are available including CISSP information security training courses, network certification training courses, Microsoft Office 2010 training courses, Microsoft Windows 7 training courses, and many, many more. Miva Training has what you need to fill your important training requirements.