More worries about water

The recent report Homeland Unsecured identified a number of significant weaknesses in the nation's infrastructure that make us all vulnerable to significant harm from accidents or terrorism, and a whole chapter was devoted to water systems. Here's yet more evidence of vulnerabilities in the nation's water supply: the EPA Inspector General released a briefing report earlier this month identifying security vulnerabilities in water facilities' remote control computer systems: SCADA networks[, a technology that allows a user to collect data from sensors and control equipment, such as pumps and valves, from a remote location,] were developed with little attention paid to security. As a result, many SCADA networks may be susceptible to attacks and misuses. Furthermore, studies indicated that some water utilities may have spent little time and money securing their SCADA systems. Some areas and examples of possible SCADA vulnerabilities include operator errors and corruption, unsecured electronic communications, hardware and software limitations, physical security weaknesses, natural disasters, poorly written software, and poor security administration. Vulnerabilities may allow a person of malicious intent to cause significant harm. For example, in 2000, an engineer used radio telemetry to gain unauthorized access into an Australian waste management system and dump raw sewage into public areas. In another example, a contractor conducting a utility water assessment stated that he was able to access the utility’s network from a remote location within minutes and could have caused significant harm.
back to Blog