SecurityMatters (Netherlands)

Nowadays, the internal network communication of Industrial Control Systems (ICS) usually takes place in unencrypted form. This, however, seems to be bound to change in the future: as we write, encryption of network traffic is seriously being considered as a standard for future ICS. In this paper we take a critical look at the pro's and con's of traffic encryption in ICS. We come to the conclusion that encrypting this kind of network traffic may actually result in a reduction of the security and overall safety. As such, sensible versus non-sensible use of encryption needs to be carefully considered both in developing ICS standards and systems..

Embedded devices are playing a major role in our way of life. Similar to other computer systems embedded devices are vulnerable to code-reuse attacks. Compromising these devices in a critical environment constitute a significant security and safety risk. In this paper, we present µShield, a memory corruption exploitation mitigation system for embedded COTS binaries with configurable protection policies that do not rely on any hardware-specific feature. Our evaluation shows that µShield provides its protection with a limited performance overhead.

Passions, jeux sacres, mysteres appartiennent au repertoire classique des etudes litteraires medievales et peuplent confusement l’imaginaire contemporain d’un Moyen Âge des cathedrales et des troubadours. Au-dela des textes figes dans leur edition scientifique, et a cote du contenu proprement sacre et de ses fonctions religieuses, la portee sociale de la mise en place et de la pratique de ces morceaux joues par souvent plus d’une centaine d’acteurs devant parfois des milliers de spectateurs n...