“Smart” infrastructure has become one of the buzziest bits of IT jargon over the last year, thanks to massive marketing pushes from companies including IBM, HP, and Cisco. The big idea: putting sensors everywhere that communicate in a mesh network and allow real-time tracking and optimization of everything from traffic to the power grid to the water supply.
But for security researchers, tying complex infrastructure systems to equally complex technology paints a bullseye on those “smart” sensor projects. In a talk at the Black Hat security conference in Barcelona, Greek researcher Thanassis Giannetsos presented a new software tool that he and two colleagues have written that they say would allow a malicious hacker to penetrate a sensor network and change or delete data at will.
Read full article