Water & Wastewater industry cyber attacks increasing

Summary

October 14, 2013 -  According to data in the Repository for Industrial Security Incidents (RISI) database, the transportation and water and waste water industry sectors have both experienced large increases in the number of reported cybersecurity incidents in recent years; 160% and 60% respectively.  These findings and many more were published today in the 2013 Annual Report on Cyber Security Incidents and Trends Affecting Industrial Control Systems.    RISI is an industry-wide repository for collecting, analyzing and sharing information regarding cyber security incidents that directly affect industrial control and supervisory control and data acquisition (SCADA) systems. Industrial automation system suppliers, end-users and international government agencies and research institutes have relied on RISI since 2009 to provide them with insight into the trends affecting ICS security.  RISI data have been used for business justification, risk analysis and a variety of research projects.   ICS and SCADA security have been serious concerns for more than a decade, but have come under increased scrutiny following the discovery of the Stuxnet virus in 2010, the DuQu virus in 2011 and the Shamoon virus in 2012.  All of these viruses were found to specifically target industrial control systems. The 2013 Annual Report includes detailed analysis of the 240 incidents recorded in the RISI database ranging from 2001 through the end of 2012.  The analysis identifies where and when the incidents occurred while also identifying the types of incidents and the threat agents that executed them, including the methods and techniques used to gain entry.  The financial and operational impacts on the “victims” are also analyzed.   The report also includes detailed results and analysis from the second annual RISI Control System Security Benchmark Survey.   The survey data provides very interesting insight into the current state of control system security, especially when compared with the data regarding actual incidents.  For example, RISI data indicates that 33% of all ICS security incidents were perpetrated through remote access. This data is supported by 48% of survey respondents reporting that remote access to the controls systems is allowed at their facilities. The report can be purchased individually or as part of a Company or Corporate Membership. About the Security Incidents Organization: Founded in 2009, the Security Incidents Organization is a non-profit organization, whose mission is to collect, track, analyze and share high-value information regarding industrial cyber security incidents with member companies.