I enjoyed reading along about this on the Langner blog during late last year and early this year. He was often the first to break news about new understanding

I enjoyed reading along about this on the Langner blog during late last year and early this year. He was often the first to break news about new understanding in the PLC related code, and at the time was given very little credit for it. Yet without him it would probably have taken a LOT longer to get to the bottom of this. If you want an example of an interesting post from his blog: http://www.langner.com/en/2011/02/22/intercept-infect-infiltrate/ http://www.langner.com/en/2011/02/22/intercept-infect-infilt... Here he talks about a nice attack vector, that seems obvious if you have access to bits of the postal infrastructure in Germany... And: http://www.langner.com/en/2010/11/15/417-attack-code-doing-the-man-in-the-middle-on-the-plc/ http://www.langner.com/en/2010/11/15/417-attack-code-doing-t... Here he talks about the man in the middle attack, which meant that the PLCs reported back correct frequency/speeds to the operators, whilst doing something nasty underneath. I'm waiting for a good book to come out that details all of the stuff in this attack. It's pretty stunning work.