SCADA Snort signatures
Posted by creining | Filed under Security
I’ve been using the SCADA Snort signatures developed by Digital Bond under a DHS contract for about a year now. I have them deployed on the IDS sensors that have visibility into SCADA traffic. The signatures work on the Modbus TCP and DNP3 protocols and I find them useful to augment the other security measures in place within the control networks.
I visit Digital Bond’s SCADA security blogevery month or so to keep up on the latest news and issues related to SCADA security. Two items I found cool are that Lurhq is sponsoring development of Snort signatures for ICCP and Matt Franz joined Digital Bond. He was previously with Cisco’s Critical Infrastructure Assurance Group (CIAG).
Comments are closed.