Practical Industrial Internet of Things Security

Background and impact

In the Ukrainian electricity system, the attacks targeted the regional distribution level, as shown in Figure 9.1. Although the impacted utility companies recovered the normal power supply within six hours, damages from the attack reportedly forced the distribution units to operate in a constrained mode for many months following the incident:

Figure 9.1: Electricity distribution overview; Source: (ISAC-SANS)

In response to the incident, investigators in the Ukraine, private companies, and the US government performed forensic analysis to evaluate the attack's root cause. This case study is based on publicly available information ...