tag:blogger.com,1999:blog-6322916946732811685.post6233692121802425795..comments2024-03-28T09:46:22.919-04:00Comments on Borepatch: How long does it take to find a security problem in Industrial control systems?Borepatchhttp://www.blogger.com/profile/05029434172945099693noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-6322916946732811685.post-74021061287645892092012-11-28T18:43:34.144-05:002012-11-28T18:43:34.144-05:00Actually refineries are very delicately balanced b...Actually refineries are very delicately balanced beasties. One does not just take a unit offline. For some of the units shut down is a process that can take a week or longer. For example the rapid 5 minute shut down of a 1980's Hydrocracker Unit is possible, the 2 mile diameter 300 foot deep hole where it was is an unfortunate side effect. Or so I was informed back when I did Non Destructive Testing for many of the local refinery's.dehakalhttps://www.blogger.com/profile/07304597986579257143noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-45874177562965032702012-11-28T13:18:27.034-05:002012-11-28T13:18:27.034-05:00Denial of service is a very real threat to the pow...Denial of service is a very real threat to the power grid. Blocking control systems from being able to receive grid status (by blocking access to the meters, which by necessity are scattered all over the grid) would most likely cause a safety shutdown, at least in some parts of the grid. Kicking a refinery offline for a few hours may cause a jump in gas prices but won't significantly impact society. Turning off the lights will immediately cause a lot more mayhem.<br />Dave Hhttps://www.blogger.com/profile/04813274491601970838noreply@blogger.com