Recommended
Recommended
More Related Content
Recently uploaded
Recently uploaded (20)
Featured
Featured (20)
Zero days in stuxnet
- 2. INTRODUCTION OF STUXNET • SURFACED: in Belarus, at WILDERS SECURITY FORUMS on 17 JUNE 2017,BY ERGEY ULASEN. • SAID: “VIRUS INFECTS O.S. IN UNUSUAL WAY THROUGH VULNERABILITY. VERY DANGEROUS.”
- 3. INTRODUCTION OF STUXNET • SCENARIO:
- 4. AGENCIES INVOLVED IN UNEARTHING THE TRUTH 1. ERIC CHAN FROM SYMENTEC. 2. LIAM O’MURCHU FROM SYMENTEC. 3. EUGENE KASPERSKY
- 5. MECHANISM • Spread: • Zero days: • Isolated network: • Version: 0.3 TO 1.1
- 6. MECHANISM • DIGITAL SIGNATURE THEFT OF MICROSOFT TO IMPLEMENT ZERO DAYS.
- 7. MECHANISM • PROGRAMMABLE LOGIC CONTROLS(PLCs) ARE IN CROSS HAIR. • USE MAGIC NUMBERS.
- 8. MECHANISM • PAYLOAD IS DESIGNED TO MANUPULATE FREQUENCY IN STEALTHY AND SMART MANNNER.
- 9. PAYLOAD
- 10. WHY ZERO DAYS WITHIN STUXNET? • CAUSE IT WAS MOST AGGERESSIVE AND MORE COMMUNICABLE WITH 4 ZERODAYs IN IT.
- 11. MAJOR SPECULATIONS • INVOLVEMENT OF NATION STATE. CAUSE IT HAVE KILL DATE. WHY? • SUCH COMPLEX AND MARBLE FEET “ONLY FOR SPECIFIC PURPOSE”. • RESOURCE NEEDED TO MAKE BEYOND REACH OF NORMAL PEOPLE.
- 12. MAJOR SPECULATIONS • FIRST 5 INFECTIONS TRACED, ALL 5 IN NATANG NUCLEAR FACILITY OF IRAN.
- 13. THREAT FROM NEW REALM: critical infrastructure
- 14. STUXNET THAT MADE NOISE! • VERSION 1.1 • HAD 4 ZERO DAYS. • BLEW THE COVER. • WAS CAUGHT BY ANTIVIRUS COMPANIES. • Still in AIR.
- 15. CONCLUSION • REQUIRES A CYBER WEAPON TREATY, JUST LIKE WE HAVE FOR NUCLEAR,BIOLOGICAL,CHEMICAL WEAPONS. • HIDE SECRECY, BUT DON’T HIDE BEHIND SECRECY.
- 16. REFERANCE:- • Mark Clayton. Stuxnet cyberweapon looks to be one on a production line, researcherssay. Technical report, World WideWeb,http://www.csmonitor.com/USA/2012/0106Stuxnet- cyberweapon-looks-to-be-%one-on-a-production-line- researchers-say,January 2012. • Ralph Langner et. al. The blog of langner.com. Technical report, WorldWideWeb,http://www.langner.com/en/blog/. • Nuclear Threat Initiative. Iran’s profile. Technical report, WorldWideWeb,http://www.nti.org/countryprofiles/iran/nuclear /, March 2012.