Stuxnet and defense-in-depth

    Aug. 18, 2010

    I reviewed yesterday’s blog with a colleague from a power plant that uses Siemens control systems.  He pointed out that Stuxnet defeated defense-in-depth as we know it today. ICS cyber security is requiring that we reexamine what is meant by defense-in-depth and include the human. This will be part of the Stuxnet discussions at the September ACS Conference.
    Joe Weiss

    I reviewed yesterday’s blog with a colleague from a power plant that uses Siemens control systems.  He pointed out that Stuxnet defeated defense-in-depth as we know it today. ICS cyber security is requiring that we reexamine what is meant by defense-in-depth and include the human. This will be part of the Stuxnet discussions at the September ACS Conference.
    Joe Weiss