{"id":297,"date":"2025-04-27T17:12:53","date_gmt":"2025-04-27T17:12:53","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/?p=297"},"modified":"2025-04-27T17:12:53","modified_gmt":"2025-04-27T17:12:53","slug":"protecting-critical-infrastructure-from-scada-vulnerabilities","status":"publish","type":"post","link":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/2025\/04\/27\/protecting-critical-infrastructure-from-scada-vulnerabilities\/","title":{"rendered":"Protecting Critical Infrastructure from SCADA Vulnerabilities"},"content":{"rendered":"\n<p>Jerome Crawford<br>March 24, 2025<br>BLUF<br>SCADA systems control our everyday services like electricity and water but have<br>security weaknesses. Organizations protect these systems through network defenses,<br>access controls, And continuous monitoring.<br>SCADA System Vulnerabilities<br>SCADA systems face three major risks !!!<br>1. Outdated Technology<br>Many SCADA systems still use older computers that unfortunately can&#8217;t run on<br>modern security software . For example, A 2021 attack on a Florida water plant<br>was successful because the system used Windows 7, As we know Microsoft no<br>longer updates (CISA Alert AA21-042A).<br>2. Network Attacks<br>When SCADA systems connect to other networks, Hackers can find many ways in<br>sometimes even brute force. The famous Stuxnet virus infected Iran&#8217;s nuclear<br>program through network connections (Zetter, 2014).<br>3. Insider Threats<br>Employees with more access than allowed or just given too much access can<br>accidentally or purposely cause harm. In Australia, A water plant worker used his<br>access to dump sewage into parks (ABC News, 2016).<br>How SCADA Systems Stay Secure<br>Companies use three main methods to protect SCADA systems:<br>1. Network Protection<br>Keeping SCADA systems on Its own networks prevents most outside attacks.<br>The U.S. energy department reports this stops 80% of hacking attempts. We still<br>want to keep working towards 100%, But 80% is still better than the lower<br>numbers we have seen before. (DOE, 2022).<br>2. Stronger Logins<br>Requiring two-step verification (like a password plus text message code) makes<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>systems much harder to break into. Even a real badge for scanning purposes<br>would be significant and we even see them today in hospitals.<br>3. Constant Monitoring<br>Security teams watch over SCADA systems all the time for strange activity. After<br>Texas pipelines added monitoring systems, They caught and stopped 150<br>attacks in one year (ICS-CERT, 2021).<br>Conclusion<br>While SCADA systems have vulnerabilities, Proper security measures can effectively<br>protect our critical infrastructure at last. Regular updates, limited access, And great<br>monitoring create strong defenses against both hackers and insider threats.<br>References<br>1. U.S. Department of Homeland Security. (2016). SCADA Systems Security Guide<br>2. CISA. (2021). Alert AA21-042A: Cyber Attack on Florida Water Treatment Facility<br>3. U.S. Department of Energy. (2022). Energy Sector Cybersecurity Report<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Jerome CrawfordMarch 24, 2025BLUFSCADA systems control our everyday services like electricity and water but havesecurity weaknesses. Organizations protect these systems through network defenses,access controls, And continuous monitoring.SCADA System VulnerabilitiesSCADA systems face three major risks !!!1. Outdated TechnologyMany SCADA systems still use older computers that unfortunately can&#8217;t run onmodern security software . For example, A 2021&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/jerome-crawford\/2025\/04\/27\/protecting-critical-infrastructure-from-scada-vulnerabilities\/\">Read More<\/a><\/div>\n","protected":false},"author":30314,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":0},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/posts\/297"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/users\/30314"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/comments?post=297"}],"version-history":[{"count":1,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/posts\/297\/revisions"}],"predecessor-version":[{"id":298,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/posts\/297\/revisions\/298"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/media?parent=297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/categories?post=297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/jerome-crawford\/wp-json\/wp\/v2\/tags?post=297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}