Forum Views ()
Forum Replies ()
Read more with google mobile :
Exclusive: China software bug makes infrastructure vulnerable
|
Edition:
U.S.
Article
Comments (0)
Follow Reuters
Facebook
Twitter
RSS
YouTube
Read
Old worm won't die after 2008 attack on U.S. military
16 Jun 2011
Old worm won't die after 2008 attack on military
16 Jun 2011
Anthony lawyer's paternity question halts court
16 Jun 2011
Oracle seeks billions in lawsuit against Google
16 Jun 2011
Cable worried about poverty, not Netflix
14 Jun 2011
Discussed
111
Obama weighs new steps to boost jobs
71
Republicans to debate, with Romney the frontrunner
60
Delaware police interview teen about Congressman Weiner
Watched
Airbus' view of flying in the future
Mon, Jun 13 2011
Hefner, fiancee split; Schwarzenegger mistress talks
Wed, Jun 15 2011
Gloom deepens for Research in Motion
3:26am EDT
Exclusive: China software bug makes infrastructure vulnerable
Tweet
Share this
Email
Print
Related News
Citi says 360,000 accounts hacked in May cyber attack
Thu, Jun 16 2011
IMF cyber attack aimed to steal insider information: expert
Sun, Jun 12 2011
Spain arrests Anonymous members over Sony attack
Fri, Jun 10 2011
Regulators pressure banks after Citi data breach
Thu, Jun 9 2011
Special Report: After Japan, where's the next nuclear weak link?
Thu, Jun 9 2011
Analysis & Opinion
Amid global cybercrime, accidental hacks risk jail
Data breach overload: Is it time for a new law?
Related Topics
Technology »
China »
A Chinese national flag flies outside the Xinhua Gate of the Zhongnanhai leadership compound, the residence of China's top leaders, with World Trade Centre Tower III, a 330-meter-tall skyscraper, the tallest in Beijing in the background November 11, 2010.
Credit: Reuters/Petar Kujundzic
By Jim Finkle
NEW YORK |
Thu Jun 16, 2011 10:28pm EDT
NEW YORK (Reuters) - Software widely used in China to help run weapons systems, utilities and chemical plants has bugs that hackers could exploit to damage public infrastructure, according to the Department of Homeland Security.
The department issued an advisory on Thursday warning of vulnerabilities in software applications from Beijing-based Sunway ForceControl Technology Co that hackers could exploit to launch attacks on critical infrastructure.
Sunway's products, widely used in China, are also deployed to a lesser extent in other countries including the United States, DHS's Industrial Control Systems Cyber Emergency Response Team said in its advisory.
"These are vulnerabilities that hackers could leverage to cause destruction," said Dillon Beresford, a researcher with private security firm NSS Labs, who discovered the bugs.
The DHS advisory comes amid a wave of high-profile cyberattacks on institutions ranging from the International Monetary Fund to Citigroup Inc and Sony Corp. The attacks focused primarily on stealing data; only in a few instances has critical infrastructure been attacked.
Last year the Stuxnet computer worm surfaced, targeting industrial control systems manufactured by Siemens. Security experts widely believe that the worm was built as part of a state-backed attack on Iran's nuclear program.
Iran said the worm was used to attack computers at its Bushehr nuclear reactor. There has been widespread speculation that Stuxnet actually damaged the plant, something Iran denies.
FIXING BUGS
Beresford has worked with Sunway, Chinese authorities and the DHS to fix the bugs he found. Sunway has developed software patches to plug the holes, but it could take customers months to install those patches, Beresford said.
That gives hackers a window of time in which to exploit those vulnerabilities.
"Customers need to be notified and given proper time to patch," said Beresford, who also discovered security bugs in industrial control management systems from Siemens. The German company addressed those vulnerabilities in an advisory it released last week.
Representatives for Sunway could not immediately be reached for comment.
The Sunway software flaws highlight growing concerns about the safety of supervisory control and data acquisition (SCADA) computer systems that are used to monitor and control processes in a wide variety of facilities, including nuclear power plants, chemical factories, water distribution networks and pharmaceutical plants.
SCADA systems -- designed before Internet use became widespread -- were not built to withstand Web-based attacks.
Security systems to deal with Web threats have been bolted on rather than incorporated into SCADA systems, leaving holes that hackers can penetrate.
Beresford said that there are other vulnerabilities in SCADA systems that have yet to be documented by security experts and plugged by the manufacturers.
"The point of my putting this information out and getting it into the public domain is so that we can pressure the vendors to actually patch the vulnerabilities instead of sitting on them because these systems are inherently flawed by design," he said.
(Reporting by Jim Finkle; Editing by Tiffany Wu, Phil Berlowitz)
Technology
China
Related Quotes and News
Company
Price
Related News
Tweet this
Link this
Share this
Digg this
Email
Reprints
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (0)
Be the first to comment on reuters.com.
Add yours using the box above.
Social Stream (What's this?)
© Copyright 2011 Thomson Reuters
Editorial Editions:
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
United States
Reuters
Contact Us
Advertise With Us
Help
Journalism Handbook
Archive
Site Index
Video Index
Reader Feedback
Mobile
Newsletters
RSS
Podcasts
Widgets
Your View
Analyst Research
Thomson Reuters
Copyright
Disclaimer
Privacy
Professional Products
Professional Products Support
Financial Products
About Thomson Reuters
Careers
Online Products
Acquisitions Monthly
Buyouts
Venture Capital Journal
International Financing Review
Project Finance International
PEhub.com
PE Week
FindLaw
Super Lawyers Attorney Rating Service
Reuters on Facebook
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.
Other News on Friday, 17 June 2011 Sudan border state foes agree to talks: Mbeki
|
Israel to stop Gaza flotilla regardless of cargo
|
Police blame Islamist sect for deadly Nigeria blast
|
Zvonareva, Venus dismissed in Eastbourne; Vinci tops Wickmayer in Holland
Diving scientist takes to Arctic in attempt to tame Beluga whales
IEA says increased global demand for oil will outstrip increased supplies
Analysis: In India, hotel operators invest and educate
|
Giants defensive end Osi Umenyiora unhappy with pact
Peralta, Raburn homers lift Tigers to 6-2 lead over Tribe in battle for first
Mexican police arrest drug boss El Brad Pitt
|
Number of hacked Citi credit card accounts rises to 360,000
'Lemonade Mouth' sequel, 'Shake It Up' Disney Channel movie in development
'Game of Thrones' star Sean Bean attacked outside London pub
Mexico suffers bad publicity from war with drug cartels
Oregon defensive back Cliff Harris to miss opener vs. LSU; indefinite suspension
RIM slashes forecast again, shares tumble
|
Oracle seeks billions in lawsuit against Google
|
Special report: Government in cyber fight but can't keep up
|
Spam clogging Amazon's Kindle self-publishing
|
Facebook may be good for friendships, politics
|
Microsoft releases Kinect software for developers
|
Niche chipmaker eyes M&A to gain analog talent
|
NY police to investigate Tupac robbery confession
|
Woes of famous, powerful shine light on sex addiction
|
R&B singer Ledisi gets introspective on new album
|
Crusading poet embodies Mexico's drug war pain
|
Rebels dismiss election offer, NATO pounds Tripoli
|
Assad's tycoon cousin, target of protesters, quits
|
Greek PM jettisons finance minister in crisis reshuffle
|
Secretary Gates thanks Pentagon journalists for critical coverage
Dallas delights in Dirk Nowitzki, champion Mavs
China to boost coastal forces amid sea tensions
|
Robert Rock's 70 might be best first day effort at U.S. Open, considering...
Cuba, others cause trouble in U.N. re-election: envoys
|
U.S. Open nightmare for Phil Mickelson: "I played horrific!"
China raises flood alert to top level, 555,000 evacuated
|
Fan-tastic pitching: Gio Gonzalez' 10 K's power A's past Royals
Sony hacker claims responsibility for CIA website shutdown
Capitol Roar: McIlroy wows 'em with first round 65, leads at U.S. Open
Exiled Thaksin seeks December return to Thailand
|
Al-Qaeda appoints Zawahiri as Osamas successor
Nortel resets bidding date for patent portfolio as Google joins bidder list
Fukudome four RBI help Cubs outslug Brew Crew
Somali pirates free German ship after ransom paid
|
BlackBerry maker slashes forecast, shares tumble
|
Samsung Electronics, Hynix tumble on Q2 earnings worries
|
Exclusive: China software bug makes infrastructure vulnerable
|
Hacktivists make noise on government websites
|
Google-backed Xunlei postpones Nasdaq IPO: IFR
|
Green Lantern emerges from obscurity; critics pounce
|
U2 guitarist the Edge loses bid for Malibu mansion
|
From bomb silo to big screen, an anti-nuclear quest
|
Shelling erupts in Sudan's Abyei, official says
|
Rebecca Black pulls 'Friday' video off YouTube
Yemeni government says Saleh to return from Saudi in days
|
The Big O: Miguel Olivo delivers key hits for Mariners in bid for AL West crown
Recently displaced Filipino armers hit by flooding
Analysis: Medvedev promotes himself as candidate for change
|
Gaddafi government talking to rebels: Russian envoy
|
Food prices mean trouble for poor and politicians
|
Buzz Aldrin files for divorce from third wife
Health care by hovercraft
Libyan prisoners stuck in limbo as war drags on
|
Angola's `sans papiers' violently deported in new wave of expulsions
DEVELOPING: Pentagon investigation continues as FBI on scene
Retailer Carrefour, smartphone maker Research In Motion lower expectations
Justin Uptons homer in 10th lifts D-Backs over Giants in series finale
ILO milestone for domestic workers
Analysis: Cyber raids fuel calls for training, monitoring
|
Businesses seen as target for easier phone hacking
|
Special report: Government in cyber fight but can't keep up
|
Susan Boyle story to be turned into musical
|
Basel art fair suggests boom times are back
|
Danish Ballet, revamped, takes fresh U.S. tour
|
Greece at new risk of being pushed off euro
Bodies of missing Tenn. mom, Jo Ann Bain, and daughter found
Female Breasts Are Bigger Than Ever
AMD Trinity Accelerated Processing Units Now in Volume Production
The Avengers (2012 film), made the second biggest opening- and single-day gross of all-time
AMD to Start Production of piledriver
Ivy Bridge Quad-Core, Four-Thread Desktop CPUs
Islamists Protest Lady Gaga's Concert in Indonesia
Japan Successfully Broadcasts an 8K Signal Over the Air
ECB boosts loans to 1 trillion Euro to stop credit crunch
Egypt : Mohammed Morsi won with 52 percent
What do you call 100,000 Frenchmen with their hands up
AMD Launches AMD Embedded R-Series APU Platform
Fed Should not Ignore Emerging Market Crisis
Fed casts shadow over India, emerging markets
Why are Chinese tourists so rude? A few insights