Online discoverability and vulnerabilities of ICS/SCADA devices in the Netherlands

Abstract

On a regular basis we read in the news about cyber attacks on critical infrastructures, such as power plants. Such infrastructures rely on so-called Industrial Control Systems (ICS) / Supervisory Control And Data Acquisition (SCADA) networks. By hacking the devices in such systems and networks, attackers may take over the control of critical infrastructures, with potentially devastating consequences. This report focusses on critical infrastructures in the Netherlands and investigates three main questions: How many ICS/SCADA devices located in the Netherlands can be easily found by potential attackers? How many of these devices are vulnerable to cyber attacks? What measures should be taken to prevent these devices from being hacked? CONTENT: 1. Introduction 2. ISC/SCADA Device Discoverability 3. Exposed ISC/SCADA Devices in the Netherlands 4. ICS/SCADA Devices Vulnerabilities in the Netherlands 5. Measures to be taken 6. Conclusions