Security for critical infrastructures

DHS details security requirements for automated control systems.

The US Department of Homeland Security (DHS) has laid out a set of security requirements for automated control systems to protect the country's critical infrastructure and key resources against online attacks.

ISSD 2010 conference

The recommendations in the Catalog of Control System Requirements include basic IT security measures such as installing anti-virus software and keeping it fully up to date. The document indicates that, for maximum security, remote updates for security software should be scheduled for periods when the control system is disconnected from the equipment it controls. The document also recommends against using DNS for control systems, in order to protect against denial of service attacks, and against using Voice over IP, Instant Messaging, FTP, HTTP and file sharing on control systems.

Elsewhere the document, which was put together by representatives of the Department of Energy National Laboratories and the National Institute of Standards and Technology, details practices that are recommended to increase physical security, including organisational, personnel and environmental security practices. The full set of recommendations can be seen here.

01 August 2007

Tags:    del.icio.us  digg this! digg this


Poll

Do you use the same password(s) across multiple websites?
I use the same password for all sites
I have a number of passwords but use the same for some sites
I use a different password for each site
I don't sign up to any sites that require a password

Leave a comment
View 4 comments

Jobs Recruit Sidebar

VB2010

VB2010 VB2010 will take place 29 September-1 October 2009 at the Westin Bayshore, Vancouver, BC, Canada. Early bird discount available until 15th June 2010.
Virus Bulletin currently has 190,841 registered users.