Since mid-July 2010, the team at Byres Security has been working on determining what operators of SCADA and industrial control systems can do to protect their facilities from infection from the Stuxnet worm, which is both complex and dangerous to all control systems.
As a result, the Stuxnet White Paper Analysis of the Siemens WinCC / PCS7 'Stuxnet' Malware for Industrial Control System Professionals has been updated substantially. There is no charge for this white paper, but you must register on the Tofino Security website in order to download it.
In the latest version there is a detailed list of Prevention/Mitigation techniques that can be used to protect computers running both supported Windows operating systems and older unsupported systems that cannot be patched. These mitigations are recommended for all control systems, regardless of whether a Siemens product is used or not.
Other changes in this version of the Stuxnet White Paper include:
Membership tofinosecurity.com website is free and is required to limit this information to industrial control and security professionals. Follow the link to register and download a copy of the Stuxnet White Paper.
PO Box 178
#5-7217 Lantzville Road
V0R 2H0
CANADA
+1 (250) 390 1333 x764