Stuxnet: Exploiting Trust Relationships and Expected Behavior
- Thursday, July 29, 2010, 10:30
- Threat Research
SCADA networks have been targeted by the Stuxnet malware that exploits a 0-day Windows vulnerability, as well as a hard-coded database password. The details of this issue paint a picture of security controls new and old, and give some hints about how we might expect these controls to affect us over time and whether they can evolve to meet new challenges. For starters, signed code may not be all that it’s cracked up to be.