I wanted to add information on the demonstration that will be performed Tuesday morning the 20th at the ACS Conference. This incident has ALREADY resulted in impacting a nuclear power plant, shut down a number of process facilities, and impacted the operation of numerous others. It is insidious because, depending on the design of the networks, it can affect the control system network, while not affecting the corporate IT network. Furthermore, the demonstration is being done by an end-user, not a national lab or vulnerability researcher. This is truly a big deal in maintaining the reliability of our critical systems!
Joe Weiss