Rogue7: Rogue Engineering-Station attacks on S7 Simatic PLCs

[Shlomi_Feldman]

during last week Black hat event, a team of Israelis university researches published their recent work. In the research they share with us to they managed to attack the latest generation Siemens S7 PLCs, which are considered the most secured in the industry.

I hope you will find it interesting. if you have any question please don't hesitate to contact me

[Shlomi_Feldman]

I was reading the research I shared with you several times and I got few conclusions

1. the reported issues would be very difficult to fix and Siemens would not be able to release a "quick and dirty" patch. 
2. all of the attacks were conducted through the network.

as a result the only immediate mitigation method would be a proper network visibility/detection and prevention solution exactly like we offer. Our Asset and Anomaly Detection solution would alert about any rouge configuration changes, while our strong prevention techniques would immediately stop it.

if you want further information please don't hesitate to contact me