https://urgentcomm.com/wp-content/themes/ucm_child/assets/images/logo/footer-new-logo.png
  • Home
  • News
  • Multimedia
    • Back
    • Multimedia
    • Video
    • Podcasts
    • Galleries
  • Commentary
    • Back
    • Commentary
    • Urgent Matters
    • View From The Top
    • All Things IWCE
    • Legal Matters
  • Resources
    • Back
    • Resources
    • Webinars
    • White Papers
    • Reprints & Reuse
  • IWCE
    • Back
    • IWCE
    • Conference
    • Special Events
    • Exhibitor Listings
    • Premier Partners
    • Floor Plan
    • Exhibiting Information
    • Register for IWCE
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Terms of Service
    • Privacy Statement
    • Cookies Policy
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • Mission Critical Technologies
    • Microwave/RF
    • T&D World
    • TU-Auto
  • In the field
    • Back
    • In the field
    • Broadband Push-to-X
    • Internet of Things
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Call Center/Command
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Network Tech
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Operations
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Regulations
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • Organizations
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
Urgent Communications
  • NEWSLETTER
  • Home
  • News
  • Multimedia
    • Back
    • Video
    • Podcasts
    • Omdia Crit Comms Circle Podcast
    • Galleries
    • IWCE’s Video Showcase
  • Commentary
    • Back
    • All Things IWCE
    • Urgent Matters
    • View From The Top
    • Legal Matters
  • Resources
    • Back
    • Webinars
    • White Papers
    • Reprints & Reuse
    • UC eZines
    • Sponsored content
  • IWCE
    • Back
    • Conference
    • Why Attend
    • Exhibitor Listing
    • Floor Plan
    • Exhibiting Information
    • Join the Event Mailing List
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Terms of Service
    • Privacy Statement
    • Cookies Policy
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • TU-Auto
  • newsletter
  • In the field
    • Back
    • Internet of Things
    • Broadband Push-to-X
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Cybersecurity
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
acc.com

Call Center/Command


Panel: SCADA systems at risk for intrusion attack

Panel: SCADA systems at risk for intrusion attack

ORLANDO—A panel of public utility executives speaking at the Homeland Security for Networked Industries conference here agreed that remote monitoring and control systems, particularly SCADA systems, are vulnerable to intrusion attacks and should be protected more vigilantly
  • Written by Urgent Communications Administrator
  • 11th January 2006

ORLANDO—A panel of public utility executives speaking at the Homeland Security for Networked Industries conference here agreed that remote monitoring and control systems, particularly SCADA systems, are vulnerable to intrusion attacks and should be protected more vigilantly. They also said that utilities would be well served to link disaster recovery and business continuity plans.

“I’m worried about SCADA,” said Brunson White of Energen. “It is largely misunderstood, and we don’t have as much control over it as we think we do.”

Utilities haven’t thought enough about intrusion attacks when they develop security plans, said Denny Brown of Pinnacle West, the state of Arizona’s largest energy company, which also operates the state’s largest nuclear power plant. “We have to think differently than we did before,” Brown said. “We didn’t think about the bad guys being out there wanting to get into our networks and do nasty things.”

Ray Johnson of Entergy agreed, adding that a false sense of security exists because terrorists have yet to take down a major power plant in the U.S. “A lot of people think it won’t or can’t happen,” he said. But the economic and societal impact would be enormous should such an event occur, and that’s something utility executives and public utility commissions should be thinking about, he said. “If someone takes a nuclear plant offline, that will definitely get on CNN.

It’s a legitimate threat, said David Weber of NW Natural, a small gas distribution utility serving western Oregon and southwestern Washington. “We know [terrorists] have copies of [utilities’] SCADA system designs,” he said, further suggesting that utilities invest in intrusion-detection systems if they haven’t already done so. “They provide the ability to know how they’re exploiting you. They’re not that expensive and offer the most bang for the buck,” Weber said, adding that SCADA systems only are as secure as the Windows operating systems they ride over.

According to Johnson, intrusion detection is “high on our list.” He also said that Entergy is high on network performance monitoring, which he said could raise red flags. “We try to take several tools and correlate them,” he said. “Nine out of 10 times [the notification] is benign, caused by an internal application. But you have to be concerned about the one that will end up in the newspaper.”

Terrorists always are on the lookout for opportunities, Brown said. He told of a Washington Post story that identified a specific power plant as the number one terrorist target. The next day the plant recorded 200,000 denial-of-service attacks.

Traditionally, security has taken a back seat to other more pressing matters because of budget pressures created by cost-conscious public utility commissions. That has to stop, Johnson said.

“You just can’t push certain things back any longer,” he said. “You might have to take money from other areas, and you might irritate some people by canceling projects. So what? And if you haven’t been able to make the case, scream louder or bring someone else in who can [make the case].”

Brown agreed. “It’s like health—if you have it, you don’t want to spend money on it. But once you lose it, you spend a lot of money to get it back.”

The spate of natural disasters that have afflicted the U.S.—the four major hurricanes that struck the Gulf Coast states in 2004 and Hurricane Katrina last year—along with the prospect for terrorist or hacker attacks that could take their systems down have forced utilities to rethink their recovery strategies.

“Every year, we’re threatened by hurricanes, tornadoes, floods and ice storms, and every year we go through our disaster-recovery plan. But up until now, we didn’t focus much on business recovery,” said Johnson, whose utility has the city of New Orleans in its footprint.

That all changed after Katrina. In April, Entergy conducted a mock disaster to determine what would occur if its employees were forced out of their offices for a week. In August the mock scenario became reality, but this time workers were displaced for weeks.

“Each year we do a drill that stresses our plan. Typically we try to create a worst-case scenario. This year we found out it wasn’t.”

Nevertheless, the April drill proved effective, Johnson said. “The fact we brought some of these things up sped up the response from [upper management],” after Katrina struck.

Johnson added that he “can’t stress enough,” the importance of linking disaster-recovery and business-continuity plans. “Less than 24 hours after the levees broke, we realized we would have to implement our business recovery plan,” he said.

Brown agreed. “Katrina has forced us to think outside the box. We no longer can say it can’t happen here. We can’t prevent [disasters], but we can figure out what we have to do to respond. We have to take a Boy Scouts approach—be prepared.”

Tags: Call Center/Command content Operations Public Safety Wireless Networks

Most Recent


  • Panel: SCADA systems at risk for intrusion attack
    Newscan: DHS tests new tech that could bring emergency alerts to vehicle screens
    Web Roundup Items from other news organizations DHS tests new tech that could bring emergency alerts to vehicle screens Oracle begins auditing TikTok’s algorithms Strong solar storm could impact U.S. communications this week VA systems vulnerable to cyber intrusions due to lack of effective oversight, report says Former city employee shut down police website over […]
  • Intelsat, OneWeb team on in-flight connectivity
    UK-government backed OneWeb and US-based Intelsat are joining forces to offer in-flight connectivity services to airlines, combining the former’s low-Earth-orbit (LEO) satellite service with the latter’s geostationary (GEO) satellites to “harness the power of multi-orbit capabilities.” The companies said they expect the multi-orbit solution to be in service by 2024. Inflight connectivity is certainly an […]
  • Black Hat 2022: Adapting to the growing cyberthreat landscape
    The nation’s first cybersecurity chief is warning that the growing threat landscape will get worse as society and businesses become more digitized. At the Black Hat USA 2022 conference, Chris Krebs, the first director of the U.S. Cybersecurity and Infrastructure Security Agency, said he spent the last 18 months gathering information. He spoke to people […]
  • Diffusing the connected car's ticking data-privacy timebomb
    Connected and autonomous vehicles (CAVs) collate a significant amount of data to ensure vehicle safety, requiring an always-on internet connection and hundreds of sensors. An entire industry has been developed around monitoring, logging, analyzing and monetizing it. Yet, the danger is, particularly with increasing cyber-attacks, that this data could end up being leaked and stolen. […]

Leave a comment Cancel reply

To leave a comment login with your Urgent Comms account:

Log in with your Urgent Comms account

Or alternatively provide your name, email address below:

Your email address will not be published. Required fields are marked *

Related Content

  • New Orleans-area 911 center inks multiyear APEX deal with Carbyne to replace call-handling system
  • Panel: SCADA systems at risk for intrusion attack
    Newscan: Feds recover millions from pipeline ransom hackers, hint at U.S. Internet tactic
  • Cyber is the new Cold War, and AI is the arms race
  • Private wireless networks in the US start going public

Commentary


LTE and liability: Why the fire service must move forward with digital incident command

  • 2
6th May 2022

Partnership and collaboration must be the foundation for emergency communications

18th April 2022

FirstNet success means no hypothetical ‘shots’ need to be fired, Swenson says

22nd February 2022
view all

Events


UC Ezines


IWCE 2019 Wrap Up

13th May 2019
view all

Twitter


UrgentComm

Newscan: DHS tests new tech that could bring emergency alerts to vehicle screens dlvr.it/SWpYTv

17th August 2022
UrgentComm

Connectivity Made Simple for Emergency Response dlvr.it/SWpMJF

17th August 2022
UrgentComm

Intelsat, OneWeb team on in-flight connectivity dlvr.it/SWgYb2

15th August 2022
UrgentComm

Black Hat 2022: Adapting to the growing cyberthreat landscape dlvr.it/SWgF3Y

15th August 2022
UrgentComm

Diffusing the connected car’s ticking data-privacy timebomb dlvr.it/SWdCw2

14th August 2022
UrgentComm

Patch madness: Vendor bug advisories are broken, so broken dlvr.it/SWcvFR

14th August 2022
UrgentComm

What the 6 GHz band might mean to fixed-wireless access dlvr.it/SWctfk

14th August 2022
UrgentComm

FirstNet PTT technical progress highlighted by AT&T at APCO 2022 dlvr.it/SWZtNJ

13th August 2022

Newsletter

Sign up for UrgentComm’s newsletters to receive regular news and information updates about Communications and Technology.

Expert Commentary

Learn from experts about the latest technology in automation, machine-learning, big data and cybersecurity.

Business Media

Find the latest videos and media from the market leaders.

Media Kit and Advertising

Want to reach our digital and print audiences? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • American City & County
  • IWCE
  • Light Reading
  • IOT World Today
  • Mission Critical Technologies
  • TU-Auto

WORKING WITH US

  • About Us
  • Contact Us
  • Events
  • Careers

FOLLOW Urgent Comms ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookies Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X