TOP
SSV Software Systems Register  Register
Log in to check your private messages  Log in to check your private messages
Startseite FAQ Search Mitglieder Profile  Log in 
SSV Support-Forum
VPP Cybersecurity …

 
Post new topic   Reply to topic    SSV-Forum Forum Index >>> VHPready
<<< Previous topic - Next topic >>>  
Display posts from previous:   
Author Message
kdw



Joined: 05 May 2006
Posts: 1460

PostPosted: 26.11.2017, 18:33    Post subject: VPP Cybersecurity … Reply with quote

Hi Forum.

The most critical point to watch is cybersecurity. VHPready uses closed user groups and TLS-based VPNs as security components. But the VHPready control center runs Windows-based PCs or servers. And this hardware was the weak point for the cyberattack against the Ukraine power grid.

See also: https://ics-cert.us-cert.gov/alerts/IR-ALERT-H-16-056-01

The Ukraine power grid attack was named as “SandWorm” and was working with the help of the Windows OLE package manager and remote code execution. The malicious code was distributed over PPT files.

See also https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4114

As a VPP operator please makes sure, that there is 100% secured network isolation between your Windows boxes and the VHPready distributed devices within the field. Use next-generation firewalls (NGFW) with deep-packet inspection (DPI) and anomaly-based intrusion detection.

Regards KDW
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    SSV-Forum Forum Index >>> VHPready All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

SSV Software Systems GmbH

Dünenweg 5
30419 Hannover

Fon: +49(0)511  ·  40 000-0
Fax: +49(0)511  ·  40 000-40

sales@ssv-embedded.de


Impressum    ·    Datenschutz    ·    AGB

© 2023 SSV SOFTWARE SYSTEMS GmbH. Alle Rechte vorbehalten.

ISO 9001:2015