A Quantitative Evaluation of the Target Selection of Havex ICS Malware Plugin

A quantitative evaluation of the ability of Havex ICS malware plugin to correctly discover and query its target industrial control systems finds that despite its notoriety in the media as a nation state sponsored attack code, the Havex malware plugin uses a plain and unsophisticated target selection process.