On the Insecure Nature of Turbine Control Systems in Power Generation

Explore a comprehensive security study of turbine control systems in power generation during this conference talk. Dive deep into the power generation process, industrial solutions, and their security implications. Discover vulnerabilities, learn about penetration testing methodologies, and explore available remediation approaches for turbine control systems. Gain insights into the functioning of distributed control systems (DCS) managing turbine operations in power plants worldwide. Understand the network locations of these systems and the security challenges faced by power generation owners. Examine a series of disclosed vulnerabilities, along with prioritization of DCS elements and attack vectors. Learn about the methodology for safely assessing DCS installations, identifying critical security issues, and performing do-it-yourself remediation steps confirmed by vendors. Benefit from the speakers' expertise in addressing vulnerabilities in one of the most widespread DCS on the planet.

36C3 - On the insecure nature of turbine control systems in power generation