I don’t get why process control systems like this have to be connected to the internet. If so, they only should be in a viewing mode.
Do we have to allow someone to position the main steam stop valve in a power plant from their house? We never used to.
If we tie this infrastructure to the internet; sabotage is inevitable; and sooner than anyone thinks. How many times have we heard that 128 bit keys are uncrackable, then someone cracks them in less than a week? The solution is to keep these systems off the net.
The expectation of ignorance is not a susbstitution for security.
Yup