Adversaries may attempt to perform screen capture of devices in the control system environment. Screenshots may be taken of workstations, HMIs, or other devices that display environment-relevant process, device, reporting, alarm, or related data. These device displays may reveal information regarding the ICS process, layout, control, and related schematics. In particular, an HMI can provide a lot of important industrial process information. (Citation: ICS-CERT October 2017) Analysis of screen captures may provide the adversary with an understanding of intended operations and interactions between critical devices.

Linked Issues

Issuelinks
Linktype Issue
is related to Techniques
is related to Human-Machine Interface (HMI)
is related to Jump Host
is related to Workstation
is blocked by Detection of Screen Capture
is blocked by Mitigation Limited or Not Effective
Impressum German English