Common SCADA vulnerabilities in SCADA systems - Mini Project: Build & Apply

Identify Common SCADA Vulnerabilities

📖 Scenario: You are working as a security analyst for a company that manages industrial control systems. Your task is to create a list of common vulnerabilities found in SCADA (Supervisory Control and Data Acquisition) systems to help the team understand and prevent security risks.

🎯 Goal: Create a Python dictionary that lists common SCADA vulnerabilities with a short description for each. Then, filter the vulnerabilities to find those related to network security. Finally, display the filtered vulnerabilities.

📋 What You'll Learn

Create a dictionary named vulnerabilities with exact keys and descriptions

Create a variable named network_related to store filtered vulnerabilities

Use a dictionary comprehension to filter vulnerabilities containing the word 'network'

Print the network_related dictionary to show the filtered results

💡 Why This Matters

🌍 Real World

SCADA systems control critical infrastructure like power plants and factories. Knowing common vulnerabilities helps protect these systems from attacks.

💼 Career

Security analysts and DevOps engineers use this knowledge to secure industrial control systems and prevent costly downtime or damage.

1

Create the SCADA vulnerabilities dictionary

Create a dictionary called vulnerabilities with these exact entries: 'Weak Authentication' mapped to 'Poor password policies and lack of multi-factor authentication', 'Unencrypted Communication' mapped to 'Data transmitted without encryption over the network', 'Outdated Software' mapped to 'Use of unsupported or unpatched software versions', 'Insecure Network Architecture' mapped to 'Flat networks without segmentation', and 'Lack of Monitoring' mapped to 'No real-time detection of intrusions or anomalies'.

SCADA systems

# Create the vulnerabilities dictionary with exact keys and descriptions
# Your code here

Need a hint?

Use curly braces {} to create a dictionary with the exact keys and values given.

2

Create a variable to hold network-related vulnerabilities

Create an empty dictionary called network_related to store vulnerabilities related to network security.

SCADA systems

vulnerabilities = {
    'Weak Authentication': 'Poor password policies and lack of multi-factor authentication',
    'Unencrypted Communication': 'Data transmitted without encryption over the network',
    'Outdated Software': 'Use of unsupported or unpatched software versions',
    'Insecure Network Architecture': 'Flat networks without segmentation',
    'Lack of Monitoring': 'No real-time detection of intrusions or anomalies'
}
# Create an empty dictionary called network_related
# Your code here

Need a hint?

Use network_related = {} to create an empty dictionary.

3

Filter vulnerabilities related to network security

Use a dictionary comprehension to fill network_related with entries from vulnerabilities where the description contains the word 'network'.

SCADA systems

vulnerabilities = {
    'Weak Authentication': 'Poor password policies and lack of multi-factor authentication',
    'Unencrypted Communication': 'Data transmitted without encryption over the network',
    'Outdated Software': 'Use of unsupported or unpatched software versions',
    'Insecure Network Architecture': 'Flat networks without segmentation',
    'Lack of Monitoring': 'No real-time detection of intrusions or anomalies'
}

network_related = {key: value for key, value in vulnerabilities.items() if 'network' in value}
# Your code here

Need a hint?

Use {key: value for key, value in vulnerabilities.items() if 'network' in value} to filter.

4

Display the filtered network-related vulnerabilities

Write a print statement to display the network_related dictionary.

SCADA systems

vulnerabilities = {
    'Weak Authentication': 'Poor password policies and lack of multi-factor authentication',
    'Unencrypted Communication': 'Data transmitted without encryption over the network',
    'Outdated Software': 'Use of unsupported or unpatched software versions',
    'Insecure Network Architecture': 'Flat networks without segmentation',
    'Lack of Monitoring': 'No real-time detection of intrusions or anomalies'
}

network_related = {key: value for key, value in vulnerabilities.items() if 'network' in value}
# Print the network_related dictionary
# Your code here

Need a hint?

Use print(network_related) to show the filtered dictionary.