IntegraXor explained
IntegraXor |
Released: | 2003 |
Latest Release Version: | V8.0 |
Latest Release Date: | 2019-01-03 |
Website: | ECAVA IntegraXor |
IntegraXor is a supervisory control and data acquisition (SCADA) and human-machine interface (HMI) software system developed by Ecava and first released in 2003.[1] [2]
Function
As a commercial web SCADA system, it is used by engineers as a tool to develop and customize web-based SCADA applications.[3] [4] [5] [6]
Security
Security researchers have found numerous vulnerabilities[7] [8] including a Zero Day vulnerability where major manufacturers and industrial companies in the UK, US and over 30 other countries are being urged to adopt a rapidly-released fix by IntegraXor.[9] The United States Department of Homeland Security (DHS) Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) itself discovered vulnerabilities in IntegraXor.
In 2013, Ecava released the first known bug bounty program for ICS.[10] [11] However, they received a backlash for offering store credits instead of cash which does not incentivize security researchers.[12]
Notes and References
- News: Lim . WingHooi . It's all systems go . 21 May 2019 . The Star Newspaper . 7 September 2015.
- News: Sena . Renuka . THE ESSENCE OF INNOVATION . 21 May 2019 . Digital News Asia . 14 November 2016.
- Soetedjo . A. . Nakhoda . Y.I. . Lomi . A. . Web-SCADA for Monitoring and Controlling Hybrid Wind-PV Power System . Telkomnika . June 2014 . 12 . 2 . 305–314. 10.12928/telkomnika.v12i2.53 . free .
- Tyutyundzhiev . N. . Petrov . N. . Martínez-Moreno . F. . Leloux . J. . Narvarte . L. . Advanced testing of PV plants using portable SCADA tool . 31st European Photovoltaic Solar Energy Conference and Exhibition . September 2015 . 2074–2077 .
- Hamed . B. . Shamla . A.A. . Gaza's Water Wells System Based on SCADA . 5th International Conference for Engineering and Sustainability (ICESS) . 4 November 2014 .
- Book: Naidoo . N. . Bright . G. . Stopforth . R. . 2019 Southern African Universities Power Engineering Conference/Robotics and Mechatronics/Pattern Recognition Association of South Africa (SAUPEC/RobMech/PRASA) . A Distributed Framework for Programming the Artificial Intelligence of Mobile Robots in Smart Manufacturing Systems . 28–30 January 2019 . 34–41 . 10.1109/RoboMech.2019.8704788. 978-1-7281-0369-3 . 145049174 .
- AppSecEU2011, O. W. A. S. P. (2011). Utilities still under threat. Network Security
- Web site: Marks . Paul . Stuxnet analysis finds more holes in critical software . New Scientist . 21 May 2019 . 25 March 2011.
- News: Ring . Tim . UK firms urged to patch IGX industrial control systems . 21 May 2019 . SC Media UK . 17 January 2014.
- Web site: Toecker . Michael . More on IntegraXor's Bug Bounty Program . Digital Bond . 21 May 2019 . 23 July 2013.
- Web site: Ragan . Steve . SCADA vendor faces public backlash over bug bounty program . CSO . 21 May 2019 . 18 July 2013.
- Web site: Rashi . Fahmida Y. . SCADA Vendor Bashed Over "Pathetic" Bug Bounty Program . Security Week . 21 May 2019 . 16 July 2013.