3 ms·
Why don't critical infrastructure networks use a different CRC-32 polynomial for their IP packets?
by Merrill 5y ago
Why don't critical infrastructure networks use a different CRC-32 polynomial for their IP packets?
- champtar 5y agoSecurity through obscurity is not security
- detaro 5y agoHow would that help in any way?
- Merrill 5y agoAny IP packet that is valid on the Internet would be invalid and dropped on the critical infrastructure network. The only packets that could pass between the Internet and the critical infrastructure network would be those that are intentionally bridged by rewriting the CRC-32. This should not be done at the IP level, but only by application level bridges. It would prevent inadvertent connections between the Internet and the critical infrastructure network.
- detaro 5y agoThe usual problem are systems that are intentionally connected to both networks, and after compromise happily serve as points to enter the inner network.
- Merrill 5y ago‘Arm Waving’ Response to Hackers Makes Oil Industry Easy Prey Everyone from the facility managers to the private equity owners assumed that the plant’s computer network was “air-gapped” -- a term referring to computers that aren’t connected to the internet or another unsecured network. But when Mission Secure installed monitoring devices to check, they discovered that a worker on the night shift was connecting his Roku device to the internet to watch episodes of “CSI: Miami.” https://www.bloomberg.com/news/articles/2021-05-12/colonial-breach-exposes-cyber-weaknesses-in-oil-and-gas-industry https://www.bloomberg.com/news/articles/2021-05-12/colonial-... So stuff like this wouldn't happen.