[SystemSafety] Static Analysis

[Les Chambers]

And then there was this:

a testimony to a US Congress oversight committee on security vulnerabilities
in the Obama care system: healthcare.gov.  It makes you weep.

Crowd Sourced Investigations LLC, Testimony of Morgan Wright, CEO, Before
the House Committee on Science, Space, and Technology,

http://www.projectauditors.com/Papers/Troubled_Projects/HHRG-113-SY-WState-M
Wright-20131119.pdf

 

 

From: systemsafety-bounces at lists.techfak.uni-bielefeld.de
[mailto:systemsafety-bounces at lists.techfak.uni-bielefeld.de] On Behalf Of
Mike Rothon
Sent: Wednesday, February 26, 2014 9:25 PM
To: systemsafety at lists.techfak.uni-bielefeld.de
Subject: Re: [SystemSafety] Static Analysis

 

On 25/02/14 20:40, Peter Bernard Ladkin wrote:



It`'s hard to believe. Does stuff like this happen in the safety-critical
area to leading companies still? 
 
 

I appreciate that these may not be because of a lack of static analysis, but
this caught my eye a little while back:

http://www.computerweekly.com/news/2240207488/US-researchers-find-25-securit
y-vulnerabilities-in-SCADA-systems

And it was interesting to see this mentioned in the Graham Cluley blog
linked from The Guardian article.

ReVuln's website declares that it can provide details of undisclosed and
unpatched vulnerabilities in SCADA/HMI/ICS systems. These are the types of
industrial control systems which are used by critical infrastructure such as
water treatment, power stations and gas pipelines.

Mike

Mike Rothon M::+44 7718 209010 mike.rothon at certisa.com
Certisa is ISO 9001:2008 certified for Safety, Testing, Documentation and
Certification
Contact: T::+44 1932 889 442 F::+44 1932 918 118  www.certisa.com
<http://www.certisa.com/> 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.techfak.uni-bielefeld.de/mailman/private/systemsafety/attachments/20140228/2948779b/attachment.html>