Insufficiently prepared infrastructure firms increasingly under attack
A new study written jointly by McAfee and the Center for Strategic International Studies (CSIS) concludes that utility companies are increasingly under threat from targeted attacks and yet many are simply not taking the proper precautions to protect their systems. The report, to be published later today (Tuesday 19 April) and entitled "In the Dark - Crucial Industries Confront Cyberattacks", is based on a survey of 200 IT executives in 14 countries. The executives all work in companies involved with "critical infrastructure that depends most heavily on industrial control systems".
The problem of targeted attacks against infrastructure control systems was highlighted last year with the emergence of the Stuxnet worm which was targeted against specific equipment in the Iranian Natanz nuclear facility.
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump