Assessment of the Scada Stuxnet Worm on - amazonia.fiocruz.br

Are not: Assessment of the Scada Stuxnet Worm on

Stuxnet is a malicious computer wormfirst uncovered inthought to have been in development since at least Stuxnet targets supervisory control and data acquisition SCADA systems and is believed to be responsible for causing substantial damage to the nuclear program of Iran. Although neither country has openly admitted responsibility, the worm is widely understood to be a cyberweapon built jointly by the United Scara and Israel. Stuxnet specifically targets programmable logic controllers PLCswhich allow the automation of electromechanical processes such as those used to control machinery and industrial processes including gas centrifuges for separating nuclear material.

Navigation menu

Exploiting four zero-day flaws, [5] Stuxnet functions by targeting machines using the Microsoft Windows operating system and networks, then seeking out Siemens Step7 software. Stuxnet reportedly compromised Iranian PLCs, collecting information on industrial systems and causing the fast-spinning centrifuges to tear themselves apart.

Stuxnet has three modules: a worm that executes all routines related to the main payload of the attack; a link file that automatically executes the propagated copies of the worm; and a rootkit component responsible for hiding SStuxnet malicious files and processes, to prevent detection of Stuxnet. The worm then propagates across the network, scanning for Siemens Step7 software on computers controlling a PLC.

Menú de navegación

In the absence of either criterion, Stuxnet becomes dormant inside the computer. If both the conditions are fulfilled, Stuxnet introduces the infected rootkit onto the PLC and Step7 software, modifying the code and giving unexpected commands to the PLC while returning a loop of normal operation system values back to the users. InKaspersky Lab noted that the Equation Group had used two of the same Assessent attacks prior to their use in Stuxnet and commented that "the similar type of usage of both exploits together in different computer worms, at around the same time, indicates that the Equation Group and the Stuxnet developers are either the same or working closely together".

InChronicle researchers Juan Andres Guerrero-Saade and Silas Cutler presented evidence of at least four distinct threat actor malware platforms collaborating to create the different versions of Stuxnet. Stuxnet, discovered by Sergey Ulasen, initially spread via Microsoft Windows, and targeted Siemens industrial control systems.

Temas populares

While it is not the first time that hackers have targeted industrial systems, [23] nor the first publicly known intentional act of cyberwarfare to be implemented, it is the first discovered malware that spies on Assessment of the Scada Stuxnet Worm on subverts industrial systems, [24] and the first to include a programmable logic controller PLC rootkit. The worm initially spreads indiscriminately, but includes a highly specialized malware payload that is designed to target only Siemens supervisory control and data acquisition SCADA systems that are configured to control and monitor specific industrial processes. In Maythe PBS program Need To Know cited a statement by Gary SamoreWhite House Coordinator for Arms Control and Weapons of Mass Destruction, in which he said, "we're glad they [the Iranians] are having trouble with their centrifuge machine and that we — the US and its allies — are doing everything we can to make sure that we complicate matters for them," offering "winking acknowledgement" of US involvement in Stuxnet.]