Security in Computing PPt

1. THE VIRUS THAT
ALMOST STARTED
WW3
SECURITY IN COMPUTING-CASE
STUDY (CE2)

2. GROUP MEMBERS
Roll no. 22625
PRANJAL
LOTANKAR
Roll no. 22638
ASHISH PAL
Roll no. 22679
NANDINI SAHANI

3. 01
Summary
Introduction
Findings
02
03
04
05
06
Discussion
Recommendations
Conclusion

4. STATEMENT
“There is nothing Wrong
with being a terrorist, as
long as you win. Then you
write History”
- Paul Watson

5. SUMMARY
Overview of the case
study
01

6. SUMMARY
● Discovery of Stuxnet
● Better understand the case
of the Stuxnet worm and its
effects.
● Precise event that occurs in
cyberspace and impacts on
the physical world.
● Defense against such
attacks
SECURITY

7. INTRODUCTION
02

8. INTRODUCTION
1
Discovered
in Iranian
computer
2010
2
Uses 4
zero-day
exploits
3
The Natanz
Uranium
Enrichment
Facility
Plant
4
Compromised
USB drives

9. Designed to destroy the
centrifuges. Iran was using
to enrich uranium as part
of its nuclear program
What did Stuxnet
do?
The intelligence
agencies of the United
States and Israel
Who created
Stuxnet?
Exploited 4 zero-day
bugs in the Siemens
PLCs.
What vulnerability did
Stuxnet exploit?
Virus succeeded in its
goal of disrupting the
Iranian nuclear program
Was Stuxnet
successful?
Written in multiple
languages, including C, C++,
and probably several other
object-oriented languages
What language was
Stuxnet written in?

10. STUXNET ATTACK
Image reveal how attack
was planted.

12. SUMMARY OF FINDINGS
Findings
First worm known to attack SCADA
Uses peer-to-peer transfer
Uses four different vulnerabilities to affect
systems
900-1000 centrifuges were destroyed by
Stuxnet.
The infamous Stuxnet was discovered in 2010, but
had been active since at least 2009

14. DISTRIBUTION OF INFECTED SYSTEMS
WITH SIEMENS SOFTWARE
Iran-67.60
South Korea- 8.10
USA-4.98
Great Britain- 2.18
Indonesia-2.18
India- 1.25
Others- 12.15

15. DISTRIBUTION
67.6
8.1
4.98 2.18 2.18 1.25
12.15
-10
0
10
20
30
40
50
60
70
80
Iran South
Korea
USA Great
Britain
Indonesia India Others

16. DISCUSSION
03

17. DISCUSSION
Represents a new
generation of ‘fire-
and-forget’.
Targets were ‘air-
gapped’.
Some computers
were infected by
inserting a
memory stick
Damage in
countries such as
India, which had a
satellite affected.
Represents a new
generation of ‘fire-
and-forget’

18. AFTER EFFECTS
After
Stuxnet
Four years
Seven Years
1)
2)
3)
1)
The Havex intelligence-
gathering attacks
malware designed to
attack industrial
systems
An attempt to harvest
intelligence
Industroyer, the
biggest threat to
industrial control
systems
attacking power grids
automatically
3)

19. RECOMMENDATIONS
04

20. DEFENSES

21. ● Requires a Microsoft fix(patch)
● Passwords
● An antivirus - “VirusBlokAda”
● Set up a layered defense
● User privileges should be very strict
● Redundancy must be incorporated
OTHER SOLUTIONS TO PREVENT THE ATTACK

22. CONCLUSION
05

23. CONCLUSION
Targeted
attacks will
continue in
future
2.
Government
entities,
contractors are
prime targets
1.
Protection
against attacks
are necessary
3.
The impact of this
virus is felt in the
cyber realm to
this very date.
4.

24. REFERENCES
 Seven years after Stuxnet: Industrial systems security
once again in the spotlight | WeLiveSecurity
 Stuxnet worm (slideshare.net), Slideshare
 What's Next in Cybersecurity Policy (slideshare.net),
Slideshare
 Stuxnet and the Future of Cyber War (duke.edu), by
James P. Farwell and Rafal Rohozinski
 The Story Behind The Stuxnet Virus (forbes.com), the
Forbes
 The Stuxnet Attack - GeeksforGeeks, GeeksForGeeks
 PPT - The New Generation of Targeted Attacks
PowerPoint Presentation, free download - ID:3831852
(slideserve.com), Slideserve

25. THANK
YOU!