Digital Energy BPT

Explore the critical security challenges facing digital energy infrastructure in this BSides Huntsville 2014 conference talk. Delve into public network infrastructure vulnerabilities, including SSH brute force attacks on voice soft switches and transport networks. Examine the risks associated with dual-purpose online bill paying and internal billing systems. Learn about transport network disruptions caused by accidental misconfigurations and the dangers of CPE router hijacking. Investigate utility CATV head-end scenarios and in-band network management issues. Discover why Layer 2 security concerns remain prevalent in the industry. Gain valuable insights into protecting vital energy systems and networks from cyber threats.

Intro
Public Network Infrastructure Overview
Voice Soft Switch and Transport Network - SSH Brute Force
Dual Purposed Online Bill Paying Web Server & Internal Billing System
Transport Network Disrupted by Accidental Misconfiguration
CPE Router Hijacking
Utility CATV Head End Scenario
In-Band Network Management
Layer 2 Security Issues Prevalent
Bottom Line