p0wnto0wn comes to industrial control systems

Pwn2Own’s new focus on industrial control systems also brings public scrutiny to software that has long lacked it. Most of the companies here typically don’t make that code available to security researchers, and only agreed to provide it at the S4 conference’s request. (2 major industrial control system software makers, GE and Siemens, were notably absent.) Nor do these companies offer their own “bug bounty” rewards, meaning security researchers have neither the access nor incentive to find flaws.

• Uncategorized