OUT OF CONTROL: DEMONSTRATING SCADA DEVICE EXPLOITATION

Black Hat USA 2013

Presented by: Eric Forner, Brian Meixell
Date: Thursday August 01, 2013
Time: 14:15 - 15:15
Location: Palace 3

America’s next great oil and gas boom is here: the United States is on track to become the world’s top oil producer by 2020. New wells require new pipelines to distribute their bounty. These oil and gas pipelines crisscross the country carrying volatile fluids through densely populated areas. What runs these pipelines? How are they controlled? What happens when the process goes out of control?

Eric Forner

Eric works for Cimation as an ICS/SCADA Engineer, specializing in ICS Cyber Security, who has experience with various technologies in Process Controls, Building Automation, and Enterprise IT. Eric also has experience with low-level computer languages (x86 Assembly), plant floor networking, SCADA/DCS security, and vulnerability research. More specifically, Eric has focused on Siemens PCS7, Allen Bradley ControlLogix, Emerson ROC, and a variety of OPC servers/clients. Eric has performed work for some of the largest oil and gas companies in the world, concentrating on product testing, Cisco industrial hardware configuration and testing, process control network layout and design, and industrial wireless technology implementation.

Brian Meixell

Brian works for Cimation on the ICS/SCADA security team helping operators develop and implement secure network architectures with a focus on process control networks. He has conducted many vulnerability assessments and penetration tests for large control system networks. In the past, Brian has tested security products including network IPS, IDS, AV, whitelisting, and firewalls. Brian has a background in computer engineering, forensics, and reverse engineering.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats