The Flaw in the Ics System -- the Grave of the Business

This updated guide examines The Flaw in the Ics System -- the Grave of the Business and organizes the essential facts, background, and practical takeaways in clear American English.

In the past few years, businesses have been the favorite target of malicious agents on cyberspace. Besides the subjective mistakes from human, the holes appearing in the management system as well as the operation chain of the business are also factors exploited by hackers.

Specifically, according to a study conducted by PAS Global, more than 380,000 vulnerabilities have been found on ICS systems of 10,000 businesses worldwide. These holes can be exploited by malicious agents for a variety of purposes, from disrupting operations to physical damage.

Notably, the majority of these 380,000 vulnerabilities were found on system management software created by Microsoft. It also affects many different types of ICS, including human-machine interfaces (HMI), programmable logic controllers (PLCs) and distributed control systems ( distributed control systems - DCS). The vulnerability exploitation process (in most cases) only requires network access or basic privileges.

There are two main types of problems that are identified: common weakness, affecting a wide range of products and unique weaknesses, occurring only on a certain product.

So, what should enterprises do before this alarming situation? There are 3 things to do as follows:

• Applying configuration management, especially to important systems and assets, is a way to prevent potential attacks.
• Passive network monitoring, helping to capture traffic and abnormal behavior on the network, thereby offering appropriate responses.
• The last and most important requirement: Pay attention to apply security patches to vulnerable devices.