Analysis and defense of the BlackEnergy malware in the Ukrainian electric power system

Abstract

Ukrainian electric power system suffered BlackEnergy virus attacks in December 2015, resulting in blackout accident occurred simultaneously at multiple areas in Ivano-Frankovsk region, the malware also pose a threat to the electric power system security in China. Based on different versions of samples of BlackEnergy acquired, the attack mode was analyzed and the prevention of the virus was provided under the proper analysis environment.

Keywords

• blackenergy virus
• virus analysis
• intrusion prevention