Evaluar las vulnerabilidades de seguridad existentes en la red del sistema SCADA de la EERSSA

Abstract

SCADA systems unlike common information technology systems are systems that monitor and control critical processes, like power distribution of energy. SCADA systems are distinguished by continuity of their processes in an indefinitely manner, through coordinated and reliable operation of various components, such as telecommunications subsystems, data networks, server redundancy and key equipment, energy backup systems, etc . This is a distinguishing feature that differentiates it from other IT systems (Information Technology).

Initially SCADA systems were created isolated from corporate environments, and because of operational and management needs it has been necessary to allow access from other types of connections, such as Internet for data publishing and also incorporate multidisciplinary staff to operate the system. These additional permissions can become vulnerabilities.

Because the power distribution is an ongoing process that demands precision in control operations and monitoring; in this study it was considered performing an evaluation of the vulnerabilities that are present in the Local SCADA System of Empresa Electrica Regional del Sur S.A. (EERSSA); which is responsible for generation, distribution and commercializing for the provinces of Loja and Zamora Chinchipe.

In this project was performed an evaluation of information security for the data network of EERSSA SCADA system, as well as an investigation of security strategies based on ISO 27002 standard; with the objective to make proposals to improve and implement security procedures to EERSSA Local SCADA system.