![cimon scada setting cimon scada setting](https://d3i71xaburhd42.cloudfront.net/7fd40a7d53bbffbafe87a74f09ceb8cf31606827/4-Figure2-1.png)
When we find these terms in the SHODAN database, we are pretty sure that SHODAN has found a SCADA/ICS product. So far we have just shy of 700 searchable terms and are adding more every week. Of course it is the PLCs and RTUs that interest us, so we have created specific search terms related to SCADA and ICS products. Think of it as Google for devices, rather than websites. This is all stored in an online accessible database.
#Cimon scada setting software#
This header information often shows the type of software or device answering the request, what version it is, and if the device is patched (sometimes). And unless they are behind a firewall, most devices will respond, even if it is just to say "go away." It sends connection requests to those devices and records the header information from the devices if they respond. The SHODAN search engine works by searching for commonly used TCP/UDP port numbers (for more on port numbers read this blog), such as:
![cimon scada setting cimon scada setting](https://i.ytimg.com/vi/aeA-STxH67Y/maxresdefault.jpg)
Those devices can be computers, printers, switches, PLCs, SCADA RTUs, etc: anything with an IP address. We use an existing online search engine called SHODAN that scans the Internet looking for attached devices. Project SHINE (SHINE meaning SHodan INtelligence Extraction) was developed to extract information about the existence of SCADA and ICS devices accessible from the Internet. Eric Byres: One of the statements I continue to hear as I talk to executives, managers and engineers is "None of our SCADA or ICS equipment is accessible from the Internet." So this week’s blog contributor, Bob Radvanovsky, of explains Project SHINE – his effort to determine if this statement is fact or fiction.