[SCADASEC] IBM is offering 'SCADA security best practices'...

[Joe Weiss]

I think asking which IT vendors are cross-over vendors is a reasonable
question, but not the right question. To me the right question is which
cross-over vendors have the domain expertise to offer products that work
in a control system environment. Without teaming with control system
domain experts, the list shrinks real fast. Many of the best practices,
intrusion detection/prevention systems, etc are for DCS/SCADA HMI
environments that are really IT environments and are NOT appropriate for
control system field devices. Not coincidently, many of the control
system cyber incidents I have tracked are from inappropriate policies,
technologies, or testing applied to field devices.
Joe Weiss

Joe Weiss PE, CISM
Applied Control Solutions, LLC
Cupertino, CA
(408) 253-7934
(408) 253-7974 Fax
(408) 832-5396 Cell
joe.weiss at realtimeacs.com

 


-----Original Message-----
From: scadasec-bounces at news.infracritical.com
[mailto:scadasec-bounces at news.infracritical.com] On Behalf Of Matthew
Franz
Sent: Thursday, February 07, 2008 4:59 PM
To: scadasec at news.infracritical.com
Subject: Re: [SCADASEC] IBM is offering 'SCADA security best
practices'...

s/IBM/ISS and there is nothing new here right?

ISS, Symantec and other security vendor have had these sorts of
marketing docs for years....

- mdf

On Feb 7, 2008 3:35 PM, Mark Fabro <fabro at loftyperch.com> wrote:
> Indeed this is interesting. I am not sure it is  a service set that is
> widely known, as we work with IBM and I am not sure the service has
> permeated the organization.
>
>
> -----Original Message-----
> From: scadasec-bounces at news.infracritical.com
> [mailto:scadasec-bounces at news.infracritical.com] On Behalf Of Bob
> Radvanovsky
> Sent: Thursday, February 07, 2008 3:16 PM
> To: scadasec at news.infracritical.com
> Subject: [SCADASEC] IBM is offering 'SCADA security best practices'...
>
> Interesting...
>
> http://www-935.ibm.com/services/us/index.wss/offering/iss/a1027203
>
>
> _______________________________________________
> To unsubscribe from this mailing list, please visit:
> http://news.infracritical.com/mailman/listinfo/scadasec
>
> To review our privacy statement, please visit:
> http://www.infracritical.com/privacy.html
>
> scadasec at news.infracritical.com
> http://news.infracritical.com/mailman/listinfo/scadasec
>
> _______________________________________________
> To unsubscribe from this mailing list, please visit:
> http://news.infracritical.com/mailman/listinfo/scadasec
>
> To review our privacy statement, please visit:
> http://www.infracritical.com/privacy.html
>
> scadasec at news.infracritical.com
> http://news.infracritical.com/mailman/listinfo/scadasec
>



-- 
Matthew Franz
http://www.threatmind.net/

_______________________________________________
To unsubscribe from this mailing list, please visit:
http://news.infracritical.com/mailman/listinfo/scadasec

To review our privacy statement, please visit:
http://www.infracritical.com/privacy.html

scadasec at news.infracritical.com
http://news.infracritical.com/mailman/listinfo/scadasec