Hollysys debuted at the XCon2022 Security Focus Information Security Technology Summit

On September 19, 2022, the XCon2022 Security Focus Information Security Technology Summit was successfully held in Beijing. More than 10 technical experts, heads of security departments, and front-line security experts from well-known domestic network security enterprises shared in-depth topics at the meeting, and Ma Shaoshuai, director of the security technology laboratory of Ningbo Hollysys Information Security Research Institute Co., Ltd., and Liu Hanzhe, information security technology researcher, delivered a keynote speech on "Spies Hidden in Industrial Control Systems".

Hollysys debuted at the XCon2022 Security Focus Information Security Technology Summit

　　Founded in 2002, XFocus Information Security Conference is one of the most well-known, authoritative and large-scale information security conferences in China, and has a certain influence in the world. XCon Conference continues to be committed to creating an atmosphere for domestic security technology exchange and building a bond for international technology exchange and cooperation. Since its establishment 20 years ago, it has attracted more than 200 global security technology experts to give speeches here.

　　Industrial automation control systems are increasingly used in thermal power, petrochemical, gas, new energy, rail transit and other industries, as part of the national important infrastructure, its safety has also been more widely concerned. Over the past few years, attacks against industrial automation control systems have been on the rise. Through the investigation, it is found that most of the operating systems of the engineer station and operator station in the industrial control system are Windows Win7, Win XP and even Win 2000 version, and there are a large number of high-risk remote exploitable vulnerabilities.

In the topic of "Spies Hidden in Industrial Control Systems", Hollysys proposed a method to attack the host computer through the underlying PLC and other control equipment. Contrary to the conventional penetration test, the host computer is attacked through the underlying PLC, and the shell bounces back to the attacker's host by bypassing protective devices such as firewalls and network gates. When the attacker obtains the permissions of the engineer station, operator station and other upper computers, they can take deeper attacks on the industrial control system more flexibly and targetedly. Finally, security experts from Hollysys proposed a solution to the attack from two dimensions: control equipment manufacturers and control device users.

By sharing the latest research results at the XCon2022 Security Focus Information Security Technology Summit, Hollysys demonstrated its technical strength in conducting security research in the field of industrial control security, and received wide attention and recognition from industry insiders. With the independent, controllable, safe and credible new generation of active immune industrial control system as the core, combined with multi-dimensional security protection technology, Hollysys Information Security Research Institute will continue to provide users with professional product technology and overall solution support for building a comprehensive information security protection system.

Hollysys debuted at the XCon2022 Security Focus Information Security Technology Summit

Sections viewed

Contact

working hours