More worries about water
by Guest Blogger, 1/19/2005
The recent report Homeland Unsecured identified a number of significant weaknesses in the nation's infrastructure that make us all vulnerable to significant harm from accidents or terrorism, and a whole chapter was devoted to water systems. Here's yet more evidence of vulnerabilities in the nation's water supply: the EPA Inspector General released a briefing report earlier this month identifying security vulnerabilities in water facilities' remote control computer systems:
SCADA networks[, a technology that
allows a user to collect data
from sensors and control
equipment, such as pumps and
valves, from a remote
location,] were developed with little attention paid to security. As a
result, many SCADA networks may be susceptible to attacks and misuses.
Furthermore, studies indicated that some water utilities may have spent little time
and money securing their SCADA systems.
Some areas and examples of possible SCADA vulnerabilities include operator
errors and corruption, unsecured electronic communications, hardware and
software limitations, physical security weaknesses, natural disasters, poorly
written software, and poor security administration. Vulnerabilities may allow a
person of malicious intent to cause significant harm. For example, in 2000, an
engineer used radio telemetry to gain unauthorized access into an Australian
waste management system and dump raw sewage into public areas. In another
example, a contractor conducting a utility water assessment stated that he was
able to access the utility’s network from a remote location within minutes and
could have caused significant harm.
