Experimental Physics and
Industrial Control System

Andrew Johnson <[email protected]> · Mon, 06 Feb 2006 12:30:45 -0600

Brad Cumbia wrote:

Has anyone experienced global ioc crash's due to NMAP or Nessus security
scans?

In our experience vxWorks IOCs will often not survive our security
scans; we explicitly exclude them from this kind of scanning.
Also how do other labs isolate their ioc network to insure the
integrity of the systems? Any help would be appreciated.

Our operational network is firewalled off from the regular lab office
network. The vxWorks IOCs deliberately do not have a default route
installed to the local gateway, thus if someone does manage to introduce
a packet from a different subnet the IOCs will not know how to reply to it.
- Andrew
--
* * Matt Santos / / For a Brighter America * *

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System