Comment Re:Still abusive (Score 1) 511
No, you have one flag. This is not a "DNS entry present == cheater" system; it just acted as a confirmation when the hack itself was detected. Don't use boom as a shortcut.
The air gap is not the solution. Proper isolation, firewalling and virus/malware is.
No. Firewalling, virus protection, malware detection... all these techniques can be flawed, either by design, because of oversight...
It is acceptable for most system (because these issues get fixed after a while), but for a SCADA system you don't want a zero-day to be exploitable *at all*. Your system can have a ton of backdoor/vulnerabilities/exploits, if it can't be reached by any other mean than physical access they are not an issue.
An authority is a person who can tell you more about something than you really care to know.