Network security on multiple levels (was Re: NYT covers China cyberthreat)

[jlewis at lewis.org (Jon Lewis)]

On Wed, 20 Feb 2013, Jay Ashworth wrote:

> Well, Warren, I once had a discussion with someone about whether dedicated
> DS-1 to tie your SCADA network together were "secure enough" and they asked
> me:
>
> "Does it run through a DACS? Where can you program the DACS from?"

See thread: nanog impossible circuit

Even your leased lines can have packets copied off or injected into them, 
apparently so easily it can be done by accident.

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________