Security in Automation possible threats and integrated measures in CODESYS
|
|
|
- Baldwin French
- 6 years ago
- Views:
Transcription
1 Public 2017 Security in Automation possible threats and integrated measures in CODESYS CODESYS Users Conference 2017 Manfred Werner CODESYS a trademark of 3S-Smart Software Solutions GmbH
2 Agenda 1 What is Security? 2 Situation in Industrial Security 3 Security Measures within CODESYS 2 3S-Smart Software Solutions GmbH
3 What is Security? Safety vs. Security Protect humans Keep crazy people from doing stupid things Protect investments Keep smart people from doing clever things Restricted complexity Failure prediction Availability is not central Constantly growing complexity Prediction of threat situation is not possible Availability has top priority 3 3S-Smart Software Solutions GmbH
4 What is Security? Keep smart people from doing clever things! Author unknown, Location: Konsequenz, Universität Bielefeld 4 3S-Smart Software Solutions GmbH
5 Situation in Industrial Security Vulnerabilities incidents in industrial security: RISI 2010 (ICSJWG Spring Conference): 162 incidents since % unintended (handling or device errors, viruses) 22% intentional, 53% of which by insiders (employees) and 47% by externals (including suppliers) Vulnerabilities in products (ICS): ICS-Cert Advisories 44 vulnerabilities in different products from January until May 2013 Are systematically searched for by security consultants (service providers) Remarkable: The incidents have nothing to do with the vulnerabilities. Known, targeted attack on an application StuxNet 5 3S-Smart Software Solutions GmbH
6 Situation in Industrial Security Vulnerabilities Cloud / Fog Level Programming interface & remote maintenance Operation and monitoring Realtime communication between controllers Fieldbus interface 6 3S-Smart Software Solutions GmbH
7 Situation in Industrial Security IEC protection level Level 1: Occasional and accidental threat Example: Hard disk failure Example: Operating error Level 2: Intentional threat by simple means Example: Password guessed correctly Level 3: Intentional threat by highly-developed means Example: Hacker tools Level 4: Intentional threat by highly-developed means and extended resources Example: Specific development Example: Knowledge of the application Example: Corruption of insiders 7 3S-Smart Software Solutions GmbH
8 Situation in Industrial Security 8 3S-Smart Software Solutions GmbH
9 Security responsibilities in industrial control applications CODESYS Security Situation in Industrial Security 9 3S-Smart Software Solutions GmbH
10 Security measures within CODESYS Security Whitepaper Guidline for OEMs, System Integrators and Operators Introduction in security subjects in industrial automation Involved parties Definition of the security level Available tools in CODESYS to achieve the desired security level Dealing with detected security vulnerability 10 3S-Smart Software Solutions GmbH
11 Security measures within CODESYS CODESYS Development System Measure Whitepaper Section Measure relevant for Suppliers of automation components System integrators / machine builders Operator Suitable measure against Encryption of the source code of the application (10) X Occasional / and attacks User administration on project (11) X Occasional / level and attacks 11 3S-Smart Software Solutions GmbH
12 Security measures within CODESYS CODESYS Runtime System Measure Whitepaper Section Measure relevant for Suppliers of automation components System integrators / machine builders Operator Suitable measure against Access to the runtime system with authentication / permission management Encryption and signing of the executable application code (11) X X X Occasional / and attacks (11) X X Attacks Controller operation mode (12) X Occasional / and attacks Interactive login (12) X X Occasional / Disaster recovery (12) X X X Occasional / Communication encryption between the IDE and the controller (12) X X X Attacks 12 3S-Smart Software Solutions GmbH
13 Security measures within CODESYS IEC Application code Measure Whitepaper Section Measure relevant for Suppliers of automation components System integrators / machine builders Operator Suitable measure against Access restrictions out of the application / library (13) X X Occasional / and attacks Unlocking additional functions (13) X X Occasional / and attacks 13 3S-Smart Software Solutions GmbH
14 Security measures within CODESYS CODESYS Visualization Measure Whitepaper Section Measure relevant for Suppliers of automation components System integrators / machine builders Operator Suitable measure against Visualization User Management (13) X X Occasional / and attacks Communication encryption for the CODESYS WebVisu (13) X X X Attacks 14 3S-Smart Software Solutions GmbH
15 Handling of security vulnerabilities in CODESYS CODESYS Security Security measures within CODESYS External report OEM report Third party software Internal report Creation of security Jira issue Decision fix version(s) / Assessment of impact, Decision publishing release date severity, tech. urgency date Fix Integration, test, release Security-Patch Workaround Version-No. Update recommendation Jira Security- Issues OEM customer info First-Advisory Advisory Update (including Workaround) Release Advisory, Release Information Document 15 3S-Smart Software Solutions GmbH
16 Inspiring Automation Solutions Thank you for your attention. CODESYS is a registered trademark of 3S-Smart Software Solutions GmbH. Technical specifications are subject to change. Errors and omissions excepted. No reproduction or distribution, in whole or in part, without prior permission. Note: Not all CODESYS features are available in all territories. For more information on geographic restrictions, please contact support@codesys.com. 16 3S-Smart Software Solutions GmbH
Hartelijk welkom bij de CODESYS Users Conference 2014
06-2014 06-2014 Hartelijk welkom bij de CODESYS Users Conference 2014 CODESYS a trademark of 3S-Smart Software Solutions GmbH Agenda 1 Introduction of a pulse 2 The CODESYS architecture 3 CODESYS versions
Features & Improvements CODESYS V3.5 SP13. CODESYS a trademark of 3S-Smart Software Solutions GmbH
Features & Improvements CODESYS V3.5 SP13 CODESYS a trademark of 3S-Smart Software Solutions GmbH Features & Improvements CODESYS V3.5 SP13 Agenda 1 2 3 4 5 6 Runtime Engineering Visualization Motion Fieldbus
There s more to it than that! New CODESYS features and products
There s more to it than that! New CODESYS features and products Boris Schuster, 3S Smart Software Solutions CODESYS Users Conference 2016 CODESYS a trademark of 3S-Smart Software Solutions GmbH Agenda
Roadmap CODESYS CODESYS a trademark of 3S-Smart Software Solutions GmbH
Roadmap CODESYS 2016 CODESYS a trademark of 3S-Smart Software Solutions GmbH Agenda 1 Overview 2 Planned s grouped by product fields 2 3S-Smart Software Solutions GmbH Overview Roadmap is a general outlook
The right reaction. Event handling in applications and libraries
The right reaction. Event handling in applications and libraries Jouni Rikkonen, SKS Control CODESYS Users Conference 2016 CODESYS a trademark of 3S-Smart Software Solutions GmbH Agenda 1 2 What is considered
ДОБРО ПОЖАЛОВАТЬ SIEMENS AG ENERGY MANAGEMENT
ДОБРО ПОЖАЛОВАТЬ SIEMENS AG ENERGY MANAGEMENT ENERGY AUTOMATION - SMART GRID Restricted Siemens AG 20XX All rights reserved. siemens.com/answers Frederic Buchi, Energy Management Division, Siemens AG Cyber
Cyber Security. February 13, 2018 (webinar) February 15, 2018 (in-person)
Cyber Security Presenters: - Brian Everest, Chief Technology Officer, Starport Managed Services - Susan Pawelek, Accountant, Compliance and Registrant Regulation February 13, 2018 (webinar) February 15,
How do you track devices that have been approved for use? Are you automatically alerted if an unapproved device connects to the network?
Cybersecurity Due Diligence Checklist Control # Control Name Risks Questions for IT 1 Make an Benign Case: Employees Inventory of using unapproved Authorized devices without Devices appropriate security
Features & Improvements CODESYS V3.5 SP12. CODESYS a trademark of 3S-Smart Software Solutions GmbH
Features & Improvements CODESYS V3.5 SP12 CODESYS a trademark of 3S-Smart Software Solutions GmbH Features & Improvements CODESYS V3.5 SP12 Agenda 1 Runtime 2 Engineering 3 Visualization 4 Motion 5 Fieldbus
Securing Network Devices with the IEC Standard What You Should Know. Vance Chen Product Manager
with the IEC 62443-4-2 Standard What You Should Know Vance Chen Product Manager Industry Background As the Industrial IoT (IIoT) continues to expand, more and more devices are being connected to networks.
CODESYS in Building Automation
English CODESYS in IEC 61131-3 development software for efficient building and infrastructure automation. CODESYS Inspiring Automation Solutions 2 3 CODESYS in Sample application configurations with CODESYS
State machines with CODESYS: Clever usage of language properties CODESYS Users' Conference 2014, Manfred Werner
: Clever usage of language properties CODESYS Users' Conference 2014, Manfred Werner CODESYS a trademark of 3S-Smart Software Solutions GmbH Agenda 1 2 3 4 5 6 7 Task assignment and definitions A PLC classic:
Industrial Security - Protecting productivity. Industrial Security in Pharmaanlagen
- Protecting productivity Industrial Security in Pharmaanlagen siemens.com/industrialsecurity Security Trends Globally we are seeing more network connections than ever before Trends Impacting Security
2018 IT Priorities: Cybersecurity, Cloud Outsourcing & Risk Management. Follow Along
2018 IT Priorities: Cybersecurity, Cloud Outsourcing & Risk Management Today s Speakers Olivia Munro Senior Marketing Specialist Eze Castle Integration Bob Shaw Director, Technical Architecture Eze Castle
T31 Improving Industrial Security and Robustness for Industrial Control Systems (ICS)
T31 Improving Industrial Security and Robustness for Industrial Control Systems (ICS) Mike Bush, Technology Manager Clark Case, Technology Manager Rev 5058-CO900C Copyright 2012 Rockwell Automation, Inc.
EVALUATING HOW AN OPERATOR HAS EFFECTIVELY IMPLEMENTED CYBER- SECURITY POLICIES TO MANAGE AND ADMINISTER THE SYSTEM. Wurldtech Security Technologies
EVALUATING HOW AN OPERATOR HAS EFFECTIVELY IMPLEMENTED CYBER- SECURITY POLICIES TO MANAGE AND ADMINISTER THE SYSTEM Wurldtech Security Technologies Objectives Discuss how to: Evaluation of effectiveness
MigrationWiz Security Overview
MigrationWiz Security Overview Table of Contents Introduction... 2 Overview... 2 Shared Security Approach... 2 Customer Best Practices... 2 Application Security... 4 Data Security and Handling... 4 Database
2018 WTA Spring Meeting Are You Ready for a Breach? Troy Hawes, Senior Manager
2018 WTA Spring Meeting Are You Ready for a Breach? Troy Hawes, Senior Manager NIST Cybersecurity Framework (CSF) Executive Order 13636 Improving Critical Infrastructure Cybersecurity tasked the National
GOVERNMENT IT: FOCUSING ON 5 TECHNOLOGY PRIORITIES
GOVERNMENT IT: FOCUSING ON 5 TECHNOLOGY PRIORITIES INSIGHTS FROM PUBLIC SECTOR IT LEADERS DISCOVER NEW POSSIBILITIES. New network technology is breaking down barriers in government offices, allowing for
Healthcare HIPAA and Cybersecurity Update
Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International. Healthcare HIPAA and Cybersecurity Update Agenda > Introductions > Cybersecurity
Cloud FastPath: Highly Secure Data Transfer
Cloud FastPath: Highly Secure Data Transfer Tervela helps companies move large volumes of sensitive data safely and securely over network distances great and small. Tervela has been creating high performance
Security in grid control centers: Spectrum Power TM Cyber Security
Security in grid control centers: Spectrum Power TM Cyber Security Thomas Schmidt, Information Security Manager siemens.at/future-of-energy Spectrum Power TM 7 Historical Information System Table of content
Technology Security Failures Common security parameters neglected. Presented by: Tod Ferran
Technology Security Failures Common security parameters neglected Presented by: Tod Ferran October 31 st, 2015 1 HALOCK Overview Founded in 1996 100% focus on information security Privately owned Owned
Tech Announcement 2018_1
Tech Announcement 2018_1 Windows updates cause data communication problems with zenon www.copadata.com pm@copadata.com History Date Comment 09.01.2018 Document Version 1 16.01.2018 Document Version 2 19.02.2018
Changing face of endpoint security
Changing face of endpoint security S A N T H O S H S R I N I V A S A N C I S S P, C I S M, C R I S C, C E H, C I S A, G S L C, C G E I T D I R E C T O R S H A R E D S E R V I C E S, H C L T E C H N O L
CompTIA A+ Certification ( ) Study Guide Table of Contents
CompTIA A+ Certification (220-902) Study Guide Table of Contents Course Introduction About This Course About CompTIA Certifications Module 1 / Supporting Windows 1 Module 1 / Unit 1 Windows Operating System
SAFECOM SECUREWEB - CUSTOM PRODUCT SPECIFICATION 1. INTRODUCTION 2. SERVICE DEFINITION. 2.1 Service Overview. 2.2 Standard Service Features APPENDIX 2
APPENDIX 2 SAFECOM SECUREWEB - CUSTOM PRODUCT SPECIFICATION 1. INTRODUCTION This document contains product information for the Safecom SecureWeb Custom service. If you require more detailed technical information,
Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Workplace Security Solution from Tablet to Printers Holger Wenzel, Pre-Sales Computing Stefan Kitschmer, Category Manager Printing PPS, HP Germany HP Client Security Secure your investment with built-in
K12 Cybersecurity Roadmap
K12 Cybersecurity Roadmap Introduction Jason Brown, CISSP Chief Information Security Officer Merit Network, Inc jbrown@merit.edu @jasonbrown17 https://linkedin.com/in/jasonbrown17 2 Agenda 3 Why Use the
Asset Bank - Shared Hosting. Service Description
Asset Bank - Shared Hosting Service Description Date: 12th December 2016 Version: Status: d19 Released Introduction This document describes Bright Interactive s Shared Hosting Service, the hosting environment
Business Continuity Planning Keeping Pace with New Technology
Business Continuity Planning Keeping Pace with New Technology Old issues, new threats Force Majeure Increasing severe weather incidents, terrorist attacks Legacy modernization Cutover issues, system crashes,
Ⅰ Introduction 1. Ⅱ Information Security Infrastructure and Environment 2. Ⅲ Information Security Incident Prevention 8
Ⅰ Introduction 1 Ⅱ Information Security Infrastructure and Environment 2 1. Information Security Policy 2 A. Information (Personal Information) Security Policy 2 B. Information Security Policy 3 C. Personal
CSIRT in general CSIRT Service Categories Reactive Services Proactive services Security Quality Management Services CSIRT. Brmlab, hackerspace Prague
Brmlab, hackerspace Prague Lightning talks, November 2016 in general in general WTF is an? in general WTF is an? Computer Security in general WTF is an? Computer Security Incident Response in general WTF
Security Principles for Stratos. Part no. 667/UE/31701/004
Mobility and Logistics, Traffic Solutions Security Principles for Stratos Part no. THIS DOCUMENT IS ELECTRONICALLY APPROVED AND HELD IN THE SIEMENS DOCUMENT CONTROL TOOL. All PAPER COPIES ARE DEEMED UNCONTROLLED
Juniper Vendor Security Requirements
Juniper Vendor Security Requirements INTRODUCTION This document describes measures and processes that the Vendor shall, at a minimum, implement and maintain in order to protect Juniper Data against risks
Critical Infrastructure Partnership
Critical Infrastructure Partnership Overview Chris Boyer AVP Global Public Policy December 11, 2017 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV
Cyber Security for Process Control Systems ABB's view
Kaspersky ICS Cybersecurity 2017, 2017-09-28 Cyber Security for Process Control Systems ABB's view Tomas Lindström, Cyber Security Manager, ABB Control Technologies Agenda Cyber security for process control
The cybersecurity platform for industrial small and medium-sized enterprises (SME) Andreas Harner, Head of
CERT@VDE The cybersecurity platform for industrial small and medium-sized enterprises (SME) Andreas Harner, Head of CERT@VDE What is a Computer Emergency Response Team (CERT)? A CERT (sometimes called
CERT Development EFFECTIVE RESPONSE
CERT Development EFFECTIVE RESPONSE CERT Development: EFFECTIVE RESPONSE 2 Effective Response Effective Response Well funded, organized attackers threaten your network IT attacks can result in: Loss of
WHITE PAPER Cloud FastPath: A Highly Secure Data Transfer Solution
WHITE PAPER Cloud FastPath: A Highly Secure Data Transfer Solution Tervela helps companies move large volumes of sensitive data safely and securely over network distances great and small. We have been
Security analysis and assessment of threats in European signalling systems?
Security analysis and assessment of threats in European signalling systems? New Challenges in Railway Operations Dr. Thomas Störtkuhl, Dr. Kai Wollenweber TÜV SÜD Rail Copenhagen, 20 November 2014 Slide
Perimeter Defenses T R U E N E T W O R K S E C U R I T Y DEPENDS ON MORE THAN
T R U E N E T W O R K S E C U R I T Y DEPENDS ON MORE THAN Perimeter Defenses Enterprises need to take their security strategy beyond stacking up layers of perimeter defenses to building up predictive
How security intelligence can be used for incident management. Volker Rath, Techn. Lead Consulting Services
How security intelligence can be used for incident management Volker Rath, Techn. Lead Consulting Services Safety and protection matters Lots of news about threats and diseases. Which immunizations? Spreading
Your Data and Artificial Intelligence: Wise Athena Security, Privacy and Trust. Wise Athena Security Team
Your Data and Artificial Intelligence: Wise Athena Security, Privacy and Trust Wise Athena Security Team Contents Abstract... 3 Security, privacy and trust... 3 Artificial Intelligence in the cloud and
Easy IT Audit Engagements
Easy IT Audit Engagements Fellen Yang Risk Advisory Services Senior Manager fellen.yang@elliottdavis.com Nikhila Shankar Risk Advisory Services Manager nikhila.shankar@elliottdavis.com Disclaimer This
Managed IT Services Eliminating technology pains for SMBs
Managed IT Services Eliminating technology pains for SMBs Business growth is often slowed by a lack of proper IT infrastructure. But, having a complete IT department is not a viable solution for most SMBs.
Information Security in Corporation
Information Security in Corporation System Vulnerability and Abuse Software Vulnerability Commercial software contains flaws that create security vulnerabilities. Hidden bugs (program code defects) Zero
Secure Access & SWIFT Customer Security Controls Framework
Secure Access & SWIFT Customer Security Controls Framework SWIFT Financial Messaging Services SWIFT is the world s leading provider of secure financial messaging services. Their services are used and trusted
Is your privacy secure? HIPAA Compliance Workshop September Presented by: Andrés Castañeda, Senior Manager Steve Nouss, Partner
Is your privacy secure? HIPAA Compliance Workshop September 2008 Presented by: Andrés Castañeda, Senior Manager Steve Nouss, Partner Agenda Have you secured your key operational, competitive and financial
Assessing Your Incident Response Capabilities Do You Have What it Takes?
Assessing Your Incident Response Capabilities Do You Have What it Takes? March 31, 2017 Presenters Tim L. Bryan, CPA/CFF/CITP, CISA, EnCE Director, Advisory Services Forensic Technology & Investigation
KT-4 Keychain Token Welcome Guide
SafeNet Authentication Service KT-4 Keychain Token Welcome Guide Technical Manual Template Release 1.0, PN: 000-000000-000, Rev. A, March 2013, Copyright 2013 SafeNet, Inc. All rights reserved. 1 Document
SECURITY BULLETIN - HART Vulnerability in ABB Third Party Device Type Library
SECURITY BULLETIN - HART Vulnerability in ABB Third Party Device Type Library Notice The information in this document is subject to change without notice, and should not be construed as a commitment by
Guide to cyber security/cip specifications and requirements for suppliers. September 2016
Guide to cyber security/cip specifications and requirements for suppliers September 2016 Introduction and context The AltaLink cyber security/cip specification and requirements for suppliers (the standard)
Cyber Criminal Methods & Prevention Techniques. By
Cyber Criminal Methods & Prevention Techniques By Larry.Boettger@Berbee.com Meeting Agenda Trends Attacker Motives and Methods Areas of Concern Typical Assessment Findings ISO-17799 & NIST Typical Remediation
Domain System Threat Landscape. Pablo Rodriguez Nic.pr Janelle McAlister - MarkMonitor
Domain System Threat Landscape Pablo Rodriguez Nic.pr Janelle McAlister - MarkMonitor Agenda n History n Nic.PR Case Study q Registrar Perspective q Registry Perspective n Future solutions History n Over
Objectives. Classes of threats to networks. Network Security. Common types of network attack. Mitigation techniques to protect against threats
ITE I Chapter 6 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 1 Objectives Enterprise Network Security Describe the general methods used to mitigate security threats to Enterprise networks
Cyber security tips and self-assessment for business
Cyber security tips and self-assessment for business Last year one in five New Zealand SMEs experienced a cyber-attack, so it s essential to be prepared. Our friends at Deloitte have put together this
Data Security and Privacy Principles IBM Cloud Services
Data Security and Privacy Principles IBM Cloud Services 2 Data Security and Privacy Principles: IBM Cloud Services Contents 2 Overview 2 Governance 3 Security Policies 3 Access, Intervention, Transfer
A company built on security
Security How we handle security at Flywheel Flywheel was founded in 2012 on a mission to create an exceptional platform to help creatives do their best work. As the leading WordPress hosting provider for
CompTIA Security+ Study Guide (SY0-501)
CompTIA Security+ Study Guide (SY0-501) Syllabus Session 1 At the end of this session, students will understand what risk is and the basics of what it means to have security in an organization. This includes
Keys to a more secure data environment
Keys to a more secure data environment A holistic approach to data infrastructure security The current fraud and regulatory landscape makes it clear that every firm needs a comprehensive strategy for protecting
Swedish IT Incident Centre
Swedish IT Incident Centre Establishing a Government CERT from scratch the Swedish experience Establishment phase 2003 2004 CERTs in Europe Lessons Learned and Good Practices, Brussels 2005-12-13 Presentation
Securityconcept fortheprotectionofindustrialplants. Industrial Security. White PaperV1.0
Securityconcept fortheprotectionofindustrialplants Industrial Security White PaperV1.0 June 2013 Prologue This whitepaper gives an overview of Industrial Security. It describes the threats and risks to
emarketeer Information Security Policy
emarketeer Information Security Policy Version Date 1.1 2018-05-03 emarketeer Information Security Policy emarketeer AB hereafter called emarketeer is a leading actor within the development of SaaS-service
CYBERSECURITY RISK LOWERING CHECKLIST
CYBERSECURITY RISK LOWERING CHECKLIST The risks from cybersecurity attacks, whether external or internal, continue to grow. Leaders must make thoughtful and informed decisions as to the level of risk they
Whitepaper on AuthShield Two Factor Authentication with SAP
Whitepaper on AuthShield Two Factor Authentication with SAP By AuthShield Labs Pvt. Ltd Table of Contents Table of Contents...2 1.Overview...4 2. Threats to account passwords...5 2.1 Social Engineering
Data Security and Privacy : Compliance to Stewardship. Jignesh Patel Solution Consultant,Oracle
Data Security and Privacy : Compliance to Stewardship Jignesh Patel Solution Consultant,Oracle Agenda Connected Government Security Threats and Risks Defense In Depth Approach Summary Connected Government
Cyber security for digital substations. IEC Europe Conference 2017
Cyber security for digital substations IEC 61850 Europe Conference 2017 Unrestricted Siemens 2017 siemens.com/gridsecurity Substation Digitalization process From security via simplicity 1st generation:
A1 Information Security Supplier / Provider Requirements
A1 Information Security Supplier / Provider Requirements Requirements for suppliers & providers A1 Information Security Management System Classification: public Seite 1 Version history Version history
Understanding IT Audit and Risk Management
Understanding IT Audit and Risk Management Presentation overview Understanding different types of Assessments Risk Assessments IT Audits Security Assessments Key Areas of Focus Steps to Mitigation We need
2014 TRANSIT CEOs SEMINAR. Cybersecurity What Every CEO Should Know to Help Secure the System
2014 TRANSIT CEOs SEMINAR Cybersecurity What Every CEO Should Know to Help Secure the System APTA Enterprise Cyber Security WG update Vulnerable Systems Cyber attacks may be targeted toward one or more
Florida Government Finance Officers Association. Staying Secure when Transforming to a Digital Government
Florida Government Finance Officers Association Staying Secure when Transforming to a Digital Government Agenda Plante Moran Introductions Technology Pressures and Challenges Facing Government Technology
Internet of Things Toolkit for Small and Medium Businesses
Your Guide #IoTatWork to IoT Security #IoTatWork Internet of Things Toolkit for Small and Medium Businesses Table of Contents Introduction 1 The Internet of Things (IoT) 2 Presence of IoT in Business Sectors
LESSONS LEARNED IN SMART GRID CYBER SECURITY
LESSONS LEARNED IN SMART GRID CYBER SECURITY Lynda McGhie CISSP, CISM, CGEIT Quanta Technology Executive Advisor Smart Grid Cyber Security and Critical Infrastructure Protection lmcghie@quanta-technology.com
Restech. User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS
Restech User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS Your presenter: Vince Gremillion, CISSP 30+ years technical and customer service experience Founder/Co-Owner RESTECH
A New Cyber Defense Management Regulation. Ophir Zilbiger, CRISC, CISSP SECOZ CEO
A New Cyber Defense Management Regulation Ophir Zilbiger, CRISC, CISSP SECOZ CEO Personal Background IT and Internet professional (since 1992) PwC (1999-2003) Global SME for Network Director Information
Product Security Program
Product Security Program An overview of Carbon Black s Product Security Program and Practices Copyright 2016 Carbon Black, Inc. All rights reserved. Carbon Black is a registered trademark of Carbon Black,
Trends in Cybersecurity in the Water Industry A Strategic Approach to Mitigate Control System Risk
Trends in Cybersecurity in the Water Industry A Strategic Approach to Mitigate Control System Risk Standards Certification Education & Training Publishing Conferences & Exhibits Steve Liebrecht W/WW Industry
I. Introduction 1. II. Information Security Infrastructure and Environment 2. III. Information Security Incident Prevention and Responses 6
I. Introduction 1 II. Information Security Infrastructure and Environment 2 1. Information policy 2 2. Information organizations and officers 3 3. Information education 4 4. Information budget 5 III. Information
Microlab 2005 Summer Internship. Subha Gollakota High School Junior Harker High San Jose, CA
Microlab 2005 Summer Internship Subha Gollakota High School Junior Harker High San Jose, CA Agenda System administration Unix vs. Windows Terms Active Directory Proactive Security Measures Viruses and
Secure Product Design Lifecycle for Connected Vehicles
Secure Product Design Lifecycle for Connected Vehicles Lisa Boran Vehicle Cybersecurity Manager, Ford Motor Company SAE J3061 Chair SAE/ISO Cybersecurity Engineering Chair AGENDA Cybersecurity Standards
Best Practices for Cloud Security at Scale. Phil Rodrigues Security Solutions Architect Amazon Web Services, ANZ
Best Practices for Cloud Security at Scale Phil Rodrigues Security Solutions Architect Web Services, ANZ www.cloudsec.com #CLOUDSEC Best Practices for Security at Scale Best of the Best tips for Security
Threat modeling of SCADA cyber attacks
KTH ROYAL INSTITUTE OF TECHNOLOGY Threat modeling of SCADA cyber attacks Margus Välja 2018 Outline Motivation for threat modeling Threat modeling basics SCADA threat model example - Reference model - Model
Maria Hishikawa MSIX Technical Lead Sarah Storms MSIX Contractor Security
Migrant Student Information Exchange (MSIX) Security, Privacy and Account Management Webinar Deloitte Consulting LLP. February 22, 2018 Maria Hishikawa MSIX Technical Lead Sarah Storms MSIX Contractor
PCI DSS and VNC Connect
VNC Connect security whitepaper PCI DSS and VNC Connect Version 1.2 VNC Connect security whitepaper Contents What is PCI DSS?... 3 How does VNC Connect enable PCI compliance?... 4 Build and maintain a
Medical Device Vulnerability Management
Medical Device Vulnerability Management MDISS / NH-ISAC Process Draft Dale Nordenberg, MD June 2015 Market-based public health: collaborative acceleration Objectives Define a trusted and repeatable process
Introduction. Read on and learn some facts about backup and recovery that could protect your small business.
Introduction No business can afford to lose vital company information. Small-business owners in particular must take steps to ensure that client and vendor files, company financial data and employee records
Weak Spots Enterprise Mobility Management. Dr. Johannes Hoffmann
Weak Spots Enterprise Mobility Management Dr. Johannes Hoffmann Personal details TÜV Informationstechnik GmbH TÜV NORD GROUP Dr. Johannes Hoffmann IT Security Business Security & Privacy Main focus: Mobile
Addressing Cyber Threats in Power Generation and Distribution
Addressing Cyber Threats in Power Generation and Distribution VEO, Asko Tuomela o Bachelor of Science in Electrical Power Engineering o Over 6 years experience in power projects, PLCs and supervision systems
Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International.
Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International. Cybersecurity and HIPAA update Agenda Introductions Cybersecurity Overview
Measuring and Evaluating Cyber Risk in ICS Components, Products and Systems
Measuring and Evaluating Cyber Risk in ICS Components, Products and Systems Copyright 2018 UL LLC. All rights reserved. No portion of this material may be reprinted in any form without the express written
Guide to Network Defense and Countermeasures Second Edition. Chapter 2 Security Policy Design: Risk Analysis
Guide to Network Defense and Countermeasures Second Edition Chapter 2 Security Policy Design: Risk Analysis Objectives Explain the fundamental concepts of risk analysis Describe different approaches to
Threat Modeling. Bart De Win Secure Application Development Course, Credits to
Threat Modeling Bart De Win bart.dewin@ascure.com Secure Application Development Course, 2009 Credits to Frank Piessens (KUL) for the slides 2 1 Overview Introduction Key Concepts Threats, Vulnerabilities,
End-to-end Safety, Security and Reliability Keys for a successful I4.0 Migration
End-to-end Safety, Security and Reliability Keys for a successful I4.0 Migration Dr. Andreas Hauser Director Digital Service, TÜV SÜD Tokyo, 21 February 2017 Corporate Profile Slide 2 Our heritage: 150
Security Audit What Why
What A systematic, measurable technical assessment of how the organization's security policy is employed at a specific site Physical configuration, environment, software, information handling processes,
unitrends.com MYTH VS. REALITY What you need to know about Microsoft Office 365 Backup
MYTH VS. REALITY What you need to know about Microsoft Office 365 Backup Is Your Office 365 Data Fully Protected? ebook Contents Introduction /1 How data loss occurs in cloud applications Protecting Email:
IPM Secure Hardening Guidelines
IPM Secure Hardening Guidelines Introduction Due to rapidly increasing Cyber Threats and cyber warfare on Industrial Control System Devices and applications, Eaton recommends following best practices for
Xerox Mobile Print Solution
Software Version 1.5 Version 1.2 Xerox Mobile Print Solution Information Assurance Disclosure Xerox Mobile Print Solution Copyright 2011 Xerox Corporation. All rights reserved. Includes Material Copyright
QuickBooks Online Security White Paper July 2017
QuickBooks Online Security White Paper July 2017 Page 1 of 6 Introduction At Intuit QuickBooks Online (QBO), we consider the security of your information as well as your customers and employees data a
Securing Plant Operation The Important Steps
Stevens Point, WI Securing Plant Operation The Important Steps September 24, 2012 Slide 1 Purpose of this Presentation During this presentation, we will introduce the subject of securing your control system