Operational Technology, or OT, including SCADA (supervisory control and data acquisition) and ICS (industrial control systems), is a system of hardware and software designed to monitor and/or control the physical devices, processes, and events used in the production and operations segments of businesses and organizations, including critical infrastructure (CI). OT networks play a critical role in things like production, manufacturing, defense and emergency, food and agriculture, and financial systems. These systems are traditionally kept separate from IT networks, and are often owned, managed, and operated by a different team.

 

OT devices and networks can be deployed anywhere – inside a manufacturing floor, distributed across a chemical processing plant, or out in the arctic monitoring oil and gas pipelines. These OT systems often perform simple yet essential tasks, such as monitoring a valve and shutting it off when a certain value is triggered. As a result, they can perform their tasks with little change for years. Which also means they sometimes run on aging operating systems and obsolete hardware using home grown applications. Since the goal for an OT system is to run exactly as designed, even patches are only applied if they do not hinder the process of the OT system.

 

But because these OT architectures run on a separate and isolated infrastructure, until recently they have been traditionally isolated from the Internet. One of the reasons for this is because these systems are often tasked with monitoring and managing the highly sensitive processes associated with critical infrastructure. The other is that these systems can be notoriously delicate. Something as benign as an active system scan can cause these devices to fail. And any failure or compromise can have serious if not catastrophic results.

 

However, new requirements, such as connected power grids, active inventory control, smart environmental control systems, just in time manufacturing, and interactive systems tied to Big Data have begun to change all of that.

 

In addition, companies are looking for productivity improvements and cost savings by implementing such changes as optimizing plant operations, deploying a more flexible operating environment, or establishing a more proactive inventory control system that requires real time online data.  As a result, many of today’s OT systems are transited or tunneled over corporate networks, leverage common internet protocols, run on general-purpose hardware and mainstream operating systems, and are increasingly connected via wireless technologies.

 

These critical infrastructure systems are also increasingly targeted by cybercriminals, with a reported 51% of critical infrastructure enterprises reporting an OT/SCADA/ICS security breach within the past 12 months.

 

As a result, Presidential Policy Directive 21 has established a national policy on critical infrastructure security and resilience for the following sixteen sectors:

 

Chemical, Commercial Facilities, Communications, Critical Manufacturing, Dams, the Defense Industrial Base, Emergency Services, Energy, Financial Services, Food and Agriculture, Government Facilities, Healthcare and Public Health, Information Technology, Transportation Systems, Water and Wastewater Systems, and Nuclear Reactors, Materials, and Waste.

 

Targeting and taking out a critical infrastructure system has huge appeal for many cybercriminals, especially cyberterrorists or criminal organizations. Motivations include holding systems hostage for a ransom, stock price manipulation (short sell, attack, and reap a “clean” profit), denial of asset or production for strategic or tactical reasons, political awareness or impact, or corporate malfeasance (illegal competitive action).

 

Unfortunately, not only are many of these now-connected systems quite vulnerable to compromise, unlike IT networks, a failure in one of these sectors also has the possibility of causing a catastrophic event affecting both human life and property. The consequences of a successful attack can lead to the disruption, and even destruction of physical assets and essential services like water, electricity, and fuel.

 

As the utility, oil and gas, transportation, and manufacturing sectors increasingly adopt connected control systems and Industrial IoT devices, the CI attack surface is rapidly growing. The connected nature of these devices and systems poses serious challenges as they begin to utilize traditionally IT owned network infrastructure, wireless access points, and mobile networks. At the same time, the specialized nature of OT infrastructure technologies means that most IT security and threat intelligence solutions don’t have visibility into, let alone the ability defend against attacks on critical infrastructures.

 

While securing OT systems requires an integrated approach similar to IT, its objectives are inverted, with availability being the primary requirement, followed by integrity and confidentiality. OT systems are necessarily focused on delivering a particular essential service, such as electricity or water, or maintaining safety systems at chemical plants or dams, and cannot afford to be disrupted even momentarily. Conversely, IT systems are primarily focused on the collection, correlation, and distribution of data, with a primary focus on protecting confidential or personally identifiable information or trade secrets.
Addressing the requirements of an OT network requires an integrated approach comprised of the following elements:

  • Segmentation and Encrypted Communications: Perimeter security alone is inadequate. Security needs to be driven deep into the OT infrastructure, segmenting systems and devices, actively monitoring east-west traffic, and isolating compromised devices. In addition, applications and data should be encrypted in order to prevent the injection of malware into that traffic.
  • Access Control: Access to OT devices needs to be strictly managed and monitored for devices, users, applications, and protocols.
  • Secure Wireless Access: Industrial IoT (IIoT) devices communicate using a wide variety of communications protocols. Securing Wi-Fi connections only solves part of the problem. There are now thousands of vendors building IoT devices using a wide variety of connectivity and communications technologies in addition to Wi-Fi, including Bluetooth, NFC, Zigbee, and RFID. And this doesn’t include IoT devices hardwired into the network behind the firewall. Security resources need to be committed to identifying, segmenting, and securing these connections.
  • Vulnerability and Patch Management: With availability as a primary concern for OT networks and devices, patch management has historically not only been overlooked, but actively avoided. Operators may specifically decide not to patch systems that are operational and cannot afford to be taken offline for an update. But as these devices are connected to the IT network and Internet, this approach can no longer remain the status quo. Cybercriminals target known vulnerabilities, so tracking devices and vulnerabilities and implementing an aggressive patch and replace program is essential. For systems that cannot tolerate any down time, it is critical to deploy redundant, active-active devices, alternate data routes, or strict segmentation and active signature and behavioral-based security to protect unpatchable devices.
  • Behavioral Analytics and tracking: Advanced threats require more than passive security systems, especially when protecting critical infrastructure. Fortunately, the behavior of most OT systems can be pretty easily defined, which means that unusual or aberrant behavior should be likewise relatively easy to detect and block with a UEBA (user and entity behavior analytics) system in place.
  • Ruggedized devices: Traditional OT devices are often required to operate in industrial environments, exposed to extremes in temperature, weather, vibration, and impact. As IT and IoT devices are introduced to this environment, it is critical that organizations select those devices that have been tested and rated to function in extreme settings. The same is true for the security technologies used to protect OT devices and networks.
  • Deep Packet Inspection: Malware is increasingly successful at hiding and obfuscating attacks inside applications and data. Given the sensitive nature of industrial control systems (ICS) and the potential for devastating results should they be compromised, it is essential that organizations implement a combination of signature- and protocol/behavioral-based inspection of traffic traveling to, from, and between OT systems to prevent the abuse of particular industrial protocols. Such an approach is also better suited to the OT environments as it can provide protection critical protections without requiring frequent updates.

 

The transition to hyperconnected networks, such as smart cities and connected utility services, is driving the convergence of IT, OT, and IoT networks. To successfully defend these integrated networks, organizations need an architecture that scales across the entire infrastructure to provide unified visibility and control, distributed segmentation, and integrated protection. Protecting and defending today’s critical infrastructures requires a single, unified approach that integrates security solutions into an interactive Security Fabric capable of adapting to and spanning distributed IT environments, while simultaneously providing the advanced capabilities needed to defend their critical OT infrastructure.


RECOMMENDED ARTICLE FOR TECHWORLD


Rafael Aquino
Malware Over the Years
Techworld • By: Rafael Aquino | Date Posted: 4 April 2018 5:11 PM | 369 Views
I remember I saw a tweet back in 2016 about how malware had evolved over the years. Viruses, trojans, spyware – all of these were simply made to make money. Cybercriminals are really just.... See More
Rafael Aquino
Malware Over the Years
Techworld • By: Rafael Aquino | Date Posted: 5:11 PM | 369 Views
I remember I saw a tweet back in 2016 about how malware had evolved over the years. Viruses, trojans, spyware – all of these were simply made to make money. Cybercriminals are really just...See More

 
MSI Gaming joins the biggest gaming event in the philippines, E-SPORTS and gaming summit 2017
Techworld Date Posted: 24 October 2017 10:21 AM | 203 Views
Pasay City, Philippines – Micro-star International or MSI, the world’s best-selling gaming laptop brand, is one of the sponsors and exhibitors in the ESGS Event this October 27-29, 2017 at the SMX Convention Center..... See More
 
MSI Gaming joins the biggest gaming event in the philippines, E-SPORTS and gaming summit 2017
Techworld Date Posted: 10:21 AM | 203 Views
Pasay City, Philippines – Micro-star International or MSI, the world’s best-selling gaming laptop brand, is one of the sponsors and exhibitors in the ESGS Event this October 27-29, 2017 at the SMX Convention Center....See More

 
Kaspersky Lab Launches Awards Campaign to Increase Awareness on Internet Safety
Techworld Date Posted: 9 August 2017 1:35 PM | 166 Views
Kaspersky Lab has launched a campaign in Asia Pacific to educate the public and spread awareness on Internet safety. Known as the Goondus Awards, the campaign is inviting submissions from the public on Internet.... See More
 
Kaspersky Lab Launches Awards Campaign to Increase Awareness on Internet Safety
Techworld Date Posted: 1:35 PM | 166 Views
Kaspersky Lab has launched a campaign in Asia Pacific to educate the public and spread awareness on Internet safety. Known as the Goondus Awards, the campaign is inviting submissions from the public on Internet...See More

 
Nokia Mobile Rocks October with Fun Deals
Techworld Date Posted: 5 October 2018 5:27 PM | 377 Views
Nokia fans can now avail the Android™ One-powered Nokia smartphones at new affordable price tags. From October 1, the built-to-last Nokia 6.1 is available for Php14,990. Nokia mobile’s flagship hero, the Nokia 7 Plus,.... See More
 
Nokia Mobile Rocks October with Fun Deals
Techworld Date Posted: 5:27 PM | 377 Views
Nokia fans can now avail the Android™ One-powered Nokia smartphones at new affordable price tags. From October 1, the built-to-last Nokia 6.1 is available for Php14,990. Nokia mobile’s flagship hero, the Nokia 7 Plus,...See More

 
MSI Gaming Is Coming in Cebu This December
Techworld Date Posted: 29 November 2017 4:53 PM | 218 Views
Micro-star International (MSI), the world’s best-selling gaming laptop brand, is taking a big step in announcing their new concept corner to be launch this December 2017. . See More
 
MSI Gaming Is Coming in Cebu This December
Techworld Date Posted: 4:53 PM | 218 Views
Micro-star International (MSI), the world’s best-selling gaming laptop brand, is taking a big step in announcing their new concept corner to be launch this December 2017. See More

 
Parental Police: Being ‘bad cop’ Isn’t Shielding Kids from Online Threats
Techworld Date Posted: 25 April 2018 4:45 PM | 269 Views
The risks associated with growing up in an online world are not only giving parents a headache, but the time their children are spending online is a real cause for concern. As a result,.... See More
 
Parental Police: Being ‘bad cop’ Isn’t Shielding Kids from Online Threats
Techworld Date Posted: 4:45 PM | 269 Views
The risks associated with growing up in an online world are not only giving parents a headache, but the time their children are spending online is a real cause for concern. As a result,...See More

 
Lenovo Opens 20th Concept Store in the Philippines
Techworld Date Posted: 30 July 2018 3:47 PM | 408 Views
Lenovo, the world’s leading PC manufacturer, recently opened its 20th concept store in the Philippines and the second one in Cebu City, located at the third floor of Ayala Center Cebu.. See More
 
Lenovo Opens 20th Concept Store in the Philippines
Techworld Date Posted: 3:47 PM | 408 Views
Lenovo, the world’s leading PC manufacturer, recently opened its 20th concept store in the Philippines and the second one in Cebu City, located at the third floor of Ayala Center Cebu.See More

 
ADATA Launches New Range of Charging Products
Techworld Date Posted: 4 July 2018 11:07 AM | 160 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, today launched a series of new charging products that make powering mobile lifestyles easier than ever.. See More
 
ADATA Launches New Range of Charging Products
Techworld Date Posted: 11:07 AM | 160 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, today launched a series of new charging products that make powering mobile lifestyles easier than ever.See More

 
Kaspersky Lab and iSecure Networks Give Away P280k in Photo Story Contest
Techworld Date Posted: 14 October 2017 2:16 PM | 145 Views
Manila, Philippines – Be among the twelve lucky winners of a total of P280,000 worth of cash prizes tax-free just by securing your devices against cyberattacks with Kaspersky Lab and iSecure Network’s photo story.... See More
 
Kaspersky Lab and iSecure Networks Give Away P280k in Photo Story Contest
Techworld Date Posted: 2:16 PM | 145 Views
Manila, Philippines – Be among the twelve lucky winners of a total of P280,000 worth of cash prizes tax-free just by securing your devices against cyberattacks with Kaspersky Lab and iSecure Network’s photo story...See More

 
Cybercriminals Targeted at Least 400 Industrial Companies with Spear-Phishing Attack for Financial Gain
Techworld Date Posted: 6 August 2018 4:32 PM | 414 Views
Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the.... See More
 
Cybercriminals Targeted at Least 400 Industrial Companies with Spear-Phishing Attack for Financial Gain
Techworld Date Posted: 4:32 PM | 414 Views
Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the...See More


Power by

Download Free AZ | Free Wordpress Themes