firewall-wizards Digest, Vol 36, Issue 24

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."

Today's Topics:

1. Re: SCADA (Brian Loe)

----------------------------------------------------------------------

Message: 1
Date: Thu, 16 Apr 2009 08:56:48 -0500
From: Brian Loe <knobdy@gmail.com>
Subject: Re: [fw-wiz] SCADA
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<3c4611bc0904160656r2581231r8439edb9518c63eb@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

On Wed, Apr 15, 2009 at 11:00 PM, Paul D. Robertson <paul@compuwar.net> wrote:

> 1. ?I'm not sure "no more" fits in the definition- for instance a system
> that's designed to send company email can also send personal email- how
> does that make the system less reliable?
>

It propably - or probably should - violates the company's appropriate
use policy. It may also induce a non-business reply, or forwards,
which may introduce spam and viruses.

>> That's not exactly true. A system that does exactly what it
>> is supposed to - no more, no less - is achievable. It's not
>
> I'm not sure it's achievable. ?General purpose systems are too flexible to
> be completely locked down. ?I can use my "Shift" key to play the Monty
> Python theme, certainly not a design goal...

You don't put general purpose systems on a SCADA network. They don't
do email - nor do they have an email client installed. The are there
to do one thing, run the SCADA application. Everything else has been
removed or disabled.

One could argue that you don't put general purpose systems on the
corporate network either. You put accounting systems in the accounting
department and HR systems in the HR department.

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

End of firewall-wizards Digest, Vol 36, Issue 24
************************************************