• Skip to main content
  • Skip to primary sidebar

Spitzer and Boyes, LLC

Technical Services And Strategic Consulting For Technology Companies

  • Home
  • Services
    • For Suppliers, Manufacturers, And Representatives
    • For End-User Companies And OEMs
    • For Foreign Companies
    • For Lawyers
  • Products
  • Seminars
  • Downloads
  • Clients
  • About

HART hack doesn't include WirelessHART #pauto #automation #HART

January 22, 2014 by Walt Boyes

According to Joe Weiss and several other experts, it is not likely that the HART hack reported at Digital Bond’s S4 conference last week will work with a WirelessHART network. While the “man in the middle” attack reported by Alexander Bolshev does work for wired HART, the joining security of WirelessHART was designed specifically to keep a “man in the middle” attack from succeeding. Bolshev reports that he didn’t try to include WirelessHART in his demo.
The key findings in Bolshev’s attack remain that DTMs and transmission over IP continue to be vulnerabilities. This was, actually, known before, but Bolshev’s demonstration shows how they can be compromised from the instrument itself. That’s relatively new.
One expert, asking to remain unidentified, suggested that this might be a spur toward adoption of WirelessHART over wired HART.
What is true is that ANY network protocol can be compromised. It is becoming clearer with each of these demonstrations that effective security means more than writing “safe code” (whatever that is) and includes physical security as well as good training practices.
We can expect to see more demonstrations like this on industrial networking protocols. Does this mean they are unsafe? Mostly, no. If you’re looking for cookbook solutions, you probably won’t find them. What you’ll get is competent engineered solutions to security issues.

Filed Under: Walt Boyes' Blog

Primary Sidebar


Contact Us Using the Form Below or by Phone at:

  • +1.845.623.1830 (NY)
  • +1.630.639.7090 (WA)
  • +55 (21) 3958.1283 (Brasil)

Subscribe to David W Spitzer’s E-Zine and the Industrial Automation INSIDER

  • This field is for validation purposes and should be left unchanged.

Spitzer and Boyes is a proud member of the Measurement, Control and Automation Association

Follow Us on Social Media

  • LinkedIn
  • Twitter
  • YouTube

Copyright © 2023 · Magazine Pro on Genesis Framework · WordPress · Log in