Defense in Depth: A single cyber defense is the weakest form of cyber protection

摘要

The past two years have been a real wakeup call for the industrial automation industry. For the first time ever, it has been the target of sophisticated cyber-attacks like Stuxnet, Night Dragon, and Duqu. The most destructive post-Stuxnet threat is the malicious malware known as Shamoon. As with Stuxnet, Duqu, and Flame, it targeted organizations in the Middle East, in this case Saudi Aramco, Qatar's RasGas, and likely other oil and gas concerns in the region. It is a new species, however, because it did not disrupt an industrial process as Stuxnet did, nor did it stealthily steal information as Flame and Duqu did.