Operational Technology, or OT, including SCADA (supervisory control and data acquisition) and ICS (industrial control systems), is a system of hardware and software designed to monitor and/or control the physical devices, processes, and events used in the production and operations segments of businesses and organizations, including critical infrastructure (CI). OT networks play a critical role in things like production, manufacturing, defense and emergency, food and agriculture, and financial systems. These systems are traditionally kept separate from IT networks, and are often owned, managed, and operated by a different team.

 

OT devices and networks can be deployed anywhere – inside a manufacturing floor, distributed across a chemical processing plant, or out in the arctic monitoring oil and gas pipelines. These OT systems often perform simple yet essential tasks, such as monitoring a valve and shutting it off when a certain value is triggered. As a result, they can perform their tasks with little change for years. Which also means they sometimes run on aging operating systems and obsolete hardware using home grown applications. Since the goal for an OT system is to run exactly as designed, even patches are only applied if they do not hinder the process of the OT system.

 

But because these OT architectures run on a separate and isolated infrastructure, until recently they have been traditionally isolated from the Internet. One of the reasons for this is because these systems are often tasked with monitoring and managing the highly sensitive processes associated with critical infrastructure. The other is that these systems can be notoriously delicate. Something as benign as an active system scan can cause these devices to fail. And any failure or compromise can have serious if not catastrophic results.

 

However, new requirements, such as connected power grids, active inventory control, smart environmental control systems, just in time manufacturing, and interactive systems tied to Big Data have begun to change all of that.

 

In addition, companies are looking for productivity improvements and cost savings by implementing such changes as optimizing plant operations, deploying a more flexible operating environment, or establishing a more proactive inventory control system that requires real time online data.  As a result, many of today’s OT systems are transited or tunneled over corporate networks, leverage common internet protocols, run on general-purpose hardware and mainstream operating systems, and are increasingly connected via wireless technologies.

 

These critical infrastructure systems are also increasingly targeted by cybercriminals, with a reported 51% of critical infrastructure enterprises reporting an OT/SCADA/ICS security breach within the past 12 months.

 

As a result, Presidential Policy Directive 21 has established a national policy on critical infrastructure security and resilience for the following sixteen sectors:

 

Chemical, Commercial Facilities, Communications, Critical Manufacturing, Dams, the Defense Industrial Base, Emergency Services, Energy, Financial Services, Food and Agriculture, Government Facilities, Healthcare and Public Health, Information Technology, Transportation Systems, Water and Wastewater Systems, and Nuclear Reactors, Materials, and Waste.

 

Targeting and taking out a critical infrastructure system has huge appeal for many cybercriminals, especially cyberterrorists or criminal organizations. Motivations include holding systems hostage for a ransom, stock price manipulation (short sell, attack, and reap a “clean” profit), denial of asset or production for strategic or tactical reasons, political awareness or impact, or corporate malfeasance (illegal competitive action).

 

Unfortunately, not only are many of these now-connected systems quite vulnerable to compromise, unlike IT networks, a failure in one of these sectors also has the possibility of causing a catastrophic event affecting both human life and property. The consequences of a successful attack can lead to the disruption, and even destruction of physical assets and essential services like water, electricity, and fuel.

 

As the utility, oil and gas, transportation, and manufacturing sectors increasingly adopt connected control systems and Industrial IoT devices, the CI attack surface is rapidly growing. The connected nature of these devices and systems poses serious challenges as they begin to utilize traditionally IT owned network infrastructure, wireless access points, and mobile networks. At the same time, the specialized nature of OT infrastructure technologies means that most IT security and threat intelligence solutions don’t have visibility into, let alone the ability defend against attacks on critical infrastructures.

 

While securing OT systems requires an integrated approach similar to IT, its objectives are inverted, with availability being the primary requirement, followed by integrity and confidentiality. OT systems are necessarily focused on delivering a particular essential service, such as electricity or water, or maintaining safety systems at chemical plants or dams, and cannot afford to be disrupted even momentarily. Conversely, IT systems are primarily focused on the collection, correlation, and distribution of data, with a primary focus on protecting confidential or personally identifiable information or trade secrets.
Addressing the requirements of an OT network requires an integrated approach comprised of the following elements:

  • Segmentation and Encrypted Communications: Perimeter security alone is inadequate. Security needs to be driven deep into the OT infrastructure, segmenting systems and devices, actively monitoring east-west traffic, and isolating compromised devices. In addition, applications and data should be encrypted in order to prevent the injection of malware into that traffic.
  • Access Control: Access to OT devices needs to be strictly managed and monitored for devices, users, applications, and protocols.
  • Secure Wireless Access: Industrial IoT (IIoT) devices communicate using a wide variety of communications protocols. Securing Wi-Fi connections only solves part of the problem. There are now thousands of vendors building IoT devices using a wide variety of connectivity and communications technologies in addition to Wi-Fi, including Bluetooth, NFC, Zigbee, and RFID. And this doesn’t include IoT devices hardwired into the network behind the firewall. Security resources need to be committed to identifying, segmenting, and securing these connections.
  • Vulnerability and Patch Management: With availability as a primary concern for OT networks and devices, patch management has historically not only been overlooked, but actively avoided. Operators may specifically decide not to patch systems that are operational and cannot afford to be taken offline for an update. But as these devices are connected to the IT network and Internet, this approach can no longer remain the status quo. Cybercriminals target known vulnerabilities, so tracking devices and vulnerabilities and implementing an aggressive patch and replace program is essential. For systems that cannot tolerate any down time, it is critical to deploy redundant, active-active devices, alternate data routes, or strict segmentation and active signature and behavioral-based security to protect unpatchable devices.
  • Behavioral Analytics and tracking: Advanced threats require more than passive security systems, especially when protecting critical infrastructure. Fortunately, the behavior of most OT systems can be pretty easily defined, which means that unusual or aberrant behavior should be likewise relatively easy to detect and block with a UEBA (user and entity behavior analytics) system in place.
  • Ruggedized devices: Traditional OT devices are often required to operate in industrial environments, exposed to extremes in temperature, weather, vibration, and impact. As IT and IoT devices are introduced to this environment, it is critical that organizations select those devices that have been tested and rated to function in extreme settings. The same is true for the security technologies used to protect OT devices and networks.
  • Deep Packet Inspection: Malware is increasingly successful at hiding and obfuscating attacks inside applications and data. Given the sensitive nature of industrial control systems (ICS) and the potential for devastating results should they be compromised, it is essential that organizations implement a combination of signature- and protocol/behavioral-based inspection of traffic traveling to, from, and between OT systems to prevent the abuse of particular industrial protocols. Such an approach is also better suited to the OT environments as it can provide protection critical protections without requiring frequent updates.

 

The transition to hyperconnected networks, such as smart cities and connected utility services, is driving the convergence of IT, OT, and IoT networks. To successfully defend these integrated networks, organizations need an architecture that scales across the entire infrastructure to provide unified visibility and control, distributed segmentation, and integrated protection. Protecting and defending today’s critical infrastructures requires a single, unified approach that integrates security solutions into an interactive Security Fabric capable of adapting to and spanning distributed IT environments, while simultaneously providing the advanced capabilities needed to defend their critical OT infrastructure.


RECOMMENDED ARTICLE FOR TECHWORLD


 
Is Anxious the New Normal? Majority of Generation Z Admit to Feeling Anxious about Something in Their Daily Lives and Often Don’t Seek Advice to Help Them Cope with It
Techworld Date Posted: 15 January 2019 3:07 PM | 128 Views
A new Kaspersky Lab report has shown that Generation Z is the most anxious to date, with the vast majority of young people admitting they are worried about something in their lives, and the.... See More
 
Is Anxious the New Normal? Majority of Generation Z Admit to Feeling Anxious about Something in Their Daily Lives and Often Don’t Seek Advice to Help Them Cope with It
Techworld Date Posted: 3:07 PM | 128 Views
A new Kaspersky Lab report has shown that Generation Z is the most anxious to date, with the vast majority of young people admitting they are worried about something in their lives, and the...See More

 
Must-Have Christmas Bundles on Your Shopping List
Techworld Date Posted: 14 December 2018 4:45 PM | 117 Views
Everyone’s favourite holiday is a few carols away. To help everyone check off items on their holiday shopping lists, HMD Global, the home of Nokia phones, offers timely and reliable gift ideas that will.... See More
 
Must-Have Christmas Bundles on Your Shopping List
Techworld Date Posted: 4:45 PM | 117 Views
Everyone’s favourite holiday is a few carols away. To help everyone check off items on their holiday shopping lists, HMD Global, the home of Nokia phones, offers timely and reliable gift ideas that will...See More

 
Realme Philippines Introduces C1 – the #RealEntryLevelKing Smartphone
Techworld Date Posted: 29 November 2018 5:16 PM | 136 Views
Realme, an expert in providing high-quality smartphones for the youth, marks its entry into the Philippine market with its first smartphone aimed at the local market, the Realme C1.. See More
 
Realme Philippines Introduces C1 – the #RealEntryLevelKing Smartphone
Techworld Date Posted: 5:16 PM | 136 Views
Realme, an expert in providing high-quality smartphones for the youth, marks its entry into the Philippine market with its first smartphone aimed at the local market, the Realme C1.See More

 
Transcend Brings 3D NAND to mSATA SSD MSA230S for Consumers
Techworld Date Posted: 31 August 2018 2:07 PM | 197 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is introducing the mSATA SSD MSA230S to its comprehensive portfolio of high-quality, reliable solid-state storage solutions.. See More
 
Transcend Brings 3D NAND to mSATA SSD MSA230S for Consumers
Techworld Date Posted: 2:07 PM | 197 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is introducing the mSATA SSD MSA230S to its comprehensive portfolio of high-quality, reliable solid-state storage solutions.See More

 
Data Risks Give No Rewards, Kaspersky Lab Warns
Techworld Date Posted: 31 July 2017 5:04 PM | 437 Views
Users are putting their precious and sensitive data in danger, by the way they share both their information, and their physical devices containing this information with others. Kaspersky Lab's My Precious Data: Stranger Danger.... See More
 
Data Risks Give No Rewards, Kaspersky Lab Warns
Techworld Date Posted: 5:04 PM | 437 Views
Users are putting their precious and sensitive data in danger, by the way they share both their information, and their physical devices containing this information with others. Kaspersky Lab's My Precious Data: Stranger Danger...See More

 
TajMahal: Rare Spying Platform with 80 Malicious Modules, Unique Functionality and No Known Links to Current Threat Actors
Techworld Date Posted: 27 April 2019 9:46 AM | 67 Views
Kaspersky Lab researchers have uncovered a technically sophisticated cyberespionage framework that has been active since at least 2013 and appears to be unconnected to any known threat actors. The framework, which researchers have named.... See More
 
TajMahal: Rare Spying Platform with 80 Malicious Modules, Unique Functionality and No Known Links to Current Threat Actors
Techworld Date Posted: 9:46 AM | 67 Views
Kaspersky Lab researchers have uncovered a technically sophisticated cyberespionage framework that has been active since at least 2013 and appears to be unconnected to any known threat actors. The framework, which researchers have named...See More

 
Realme Seals Partnership with Argomall, Ready to Dominate First ‘Argo Deal’ Flash Sale
Techworld Date Posted: 26 April 2019 5:15 PM | 37 Views
There’s no stopping realme Philippines from delivering real value to the Filipino consumers. The new game changer brand strengthens its online retail clout through a partnership with Filipino e-commerce platform Argomall.. See More
 
Realme Seals Partnership with Argomall, Ready to Dominate First ‘Argo Deal’ Flash Sale
Techworld Date Posted: 5:15 PM | 37 Views
There’s no stopping realme Philippines from delivering real value to the Filipino consumers. The new game changer brand strengthens its online retail clout through a partnership with Filipino e-commerce platform Argomall.See More

 
Smart Reimagines Postpaid Experience with New Signature Plans
Techworld Date Posted: 21 May 2019 8:32 AM | 29 Views
PLDT mobile services arm Smart Communications is ushering in a reimagined postpaid experience that puts customers first as it launches the new Signature Plans.. See More
 
Smart Reimagines Postpaid Experience with New Signature Plans
Techworld Date Posted: 8:32 AM | 29 Views
PLDT mobile services arm Smart Communications is ushering in a reimagined postpaid experience that puts customers first as it launches the new Signature Plans.See More

 
Lax Security Leaves Car Sharing Apps Vulnerable to Attack
Techworld Date Posted: 2 August 2018 1:33 PM | 574 Views
Kaspersky Lab researchers have examined the security of 13 car sharing applications from household manufacturers across the globe – including those from Russia, the US, and Europe.. See More
 
Lax Security Leaves Car Sharing Apps Vulnerable to Attack
Techworld Date Posted: 1:33 PM | 574 Views
Kaspersky Lab researchers have examined the security of 13 car sharing applications from household manufacturers across the globe – including those from Russia, the US, and Europe.See More

 
Fortinet Continues Commitment to Close the Cyber Skills Gap though Its NSE Institute Training and Certification Program
Techworld Date Posted: 11 May 2019 11:09 AM | 85 Views
Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, has continued to lead the way on training and education in the company’s ongoing efforts to close the cyber security skills.... See More
 
Fortinet Continues Commitment to Close the Cyber Skills Gap though Its NSE Institute Training and Certification Program
Techworld Date Posted: 11:09 AM | 85 Views
Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, has continued to lead the way on training and education in the company’s ongoing efforts to close the cyber security skills...See More


Power by

Download Free AZ | Free Wordpress Themes