In further cyber espionage news, it has been revealed that the US Army Corps of Engineers’ National Inventory of Dams (NID) database has been the victim of a recent cyber espionage incident. The database holds sensitive information detailing the structure and vulnerabilities of more than eight thousand dams across the US. Attackers are likely to have accessed the data either to acquire privileged intellectual property regarding the dam’s construction and operation, but are more likely to have been conducting reconnaissance of vulnerabilities.
While no official suspect has been identified, unnamed US intelligence officials have indicated that the attack is again believed to have originated from China. Breaches of this nature are a concern, as it raises the potential for future cyber attacks against such installations. The destructive manipulation of machinery by cyber means was demonstrated in the 2010 Stuxnet malware attacks against Iranian nuclear processing facilities at Natanz. US officials have in the past identified hydroelectric plants as vulnerable to similar attacks, citing the instance of the 2009 accident at a Russian hydroelectric plant at Sayano–Shushenskaya (on that occasion a failure in automatic control systems caused by a fire resulted in a turbine explosion and extensive flooding, killing 75 people).
In a further incident demonstrating the potential vulnerability of physical installations to cyber attack, researchers in the US have demonstrated security failings in commonly used building management systems. These systems are used to manage and monitor a building’s mechanical and electrical components, including air-conditioning, plumbing and fire systems. In the test, the researchers were able to gain access to the system controlling Google’s office in Sydney, Australia.
COMMENT / Richard Bingley / Local Election Day – is it important for security professionals?
By Richard Bingley, Director CSARN and Senior Lecturer at the Department of Security and Resilience, Buckinghamshire New University
Well folks, it’s local election day here in the UK and the roads are clogged up with families eager to get to their polling stations; or perhaps not!
Local election turnout has dwindled over the past few years… perhaps an indication of public cynicism, disinterest, heavily mobilised daily work and social patterns, and the fact that the electoral system here makes what should be an incredibly simple function, so remarkably difficult.
For example, ‘Thursday’ might be a good name for a Detective Inspector in the popular new TV series ‘Endeavour’, but is it the correct day, or the only day, that we can hold a national election?
Griping aside, we are where we are. But what implications do local elections have, per se, for security management personnel?
Hopefully some of our students (or all of our students!) are beginning to dig into the detail of wider political dynamics and environments and establish that there may – or may not – be some implications from local elections anywhere in the world for businesses that they manage and protect.
Continue reading "COMMENT / Richard Bingley / Local Election Day – is it important for security professionals?" »
Posted at 03:10 PM in Comment | Permalink | Comments (0)
Reblog (0) | | Digg This