Security bloggers network award finalist

I almost missed it, but our blog had been nominated as a finalist for the 2011 security bloggers network awards. Thanks to the jury (Bill Brenner of CSOOnline, Ellen Messmer of Network World, Kelly Jackson-Higgins of Dark Reading and Larry Walsh of Channelnomics) for...

See Ralph at TED

Ralph is going to speak next week at TED conference. The challenging task: Explain Stuxnet in ten minutes or less.
Intercept, infect, infiltrate

Intercept, infect, infiltrate

Several journalists had asked if it would be possible that the attackers intercepted some of the control system shipments to Iran, installed Stuxnet on the controllers, and let them loose again on their way to Natanz. After all, it is known that this had been done...

Matching Langner’s Stuxnet analysis and Symantec’s dossier update

Symantec recently issued an update on their Stuxnet dossier, and many people wonder how their updated information might fit together with ours, so let’s take a look. Symantec updated their dossier on February 11, 2011 in two essential areas. First, they published an...

The cyber arms race and what we can do about it

Back in November 2010, Andrew Ginter wrote a blog post in which he put Symantec’s Stuxnet dossier in the context of irresponsible disclosure. In a nutshell, Andrew argued that publishing technical analysis of cyberwar weapons in the midst of an ongoing cyber battle...