How long does it take to hack a Power Plant?

I start to get scared – more and more. Back in September I blogged on Critical Infrastructure Protection – Live which shows what would happen if somebody would be able to tamper with power generators. Now, during RSA there was a guy called Ira Winkler telling the audience that they had the job to do a penetration testing on a power company network and that they got in in a day. I do not think that this is surprising especially as part of their successful attack was using social engineering techniques (which the attackers usually do heavily) but it is still very, very scary! It is said that they gained access to the grid. The question is – how far. Read it yourself.

Roger