Data Diode Cybersecurity Implementation Protects SCADA Network and Facilitates Transfer of Operations Information to Business Users
|
|
|
- Janis Price
- 6 years ago
- Views:
Transcription
1 Data Diode Cybersecurity Implementation Protects SCADA Network and Facilitates Transfer of Operations Information to Business Users Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: Dr. Ronald Mraz, President & CEO Owl Computing Technologies 2016 ISA Water / Wastewater and Automatic Controls Symposium August 4-6, 2015 Orlando, Florida, USA
2 Presenter Dr. Ronald Mraz, President & CEO Founder of Owl Computing Technologies 20 years of private sector experience including IBM & Westinghouse Doctorate from Carnegie Mellon University, Masters of Science from Syracuse University, BS from Drexel University Senior Member of IEEE, holds 12 patents Aug 4-6, 2015 Orlando, Florida, USA 2
3 Presentation Outline Introduction to Owl DHS Recommendations for Defending Industrial Control Systems/SCADA What is a Data Diode Applying Data Diodes to Protect SCADA, PLCs, Historians Use Cases Summary Aug 4-6, 2015 Orlando, Florida, USA 3
4 About Owl Computing Technologies US owned and operated US supply chain US R&D & manufacturing US based Technical Support & Service US Secret and Top Secret Clearances Self-funded Development Experience Exclusive focus on cybersecurity for 17 years Over 2000 deployments globally Global Sales and Service Accreditation Services Configuration Management Services Multi-Market Solutions Government Cross Domain Solutions DoD & Intelligence Agencies Critical Infrastructure Network Defense Utilities: Electric, Gas, Water Energy: Oil & Gas, Petrochemical Telecommunications Financial Services Technology Innovator Single 1U, all-in-one solution Server based Communication Card Systems 24 technology patents Deterministic one-way transfers Non-routable protocol EAL Certified UCDSMO Base Line Penetration Tested Aug 4-6, 2015 Orlando, Florida, USA 4
5 Cybersecurity Challenges for Critical Infrastructure (per DHS) 4% Cyber Threats 1% 2% Execution of Malware 17% 9% 38% Unpatched Systems Open Connections Perimeter Breaches Compromised Credentials Exploit Back doors 29% Miscellanous exploits Aug 4-6, 2015 Orlando, Florida, USA 5
6 DHS Seven Strategies for Defeating Threats Highlights the use of Data Diodes 1. Application Whitelisting 2. Configuration/Patch Management 3. Reduce Attack Surface 4. Defendable Environment 5. Manage Authentication 6. Implement Secure Remote Access 7. Monitor & Respond Supported Supported Supported Supported Supported Supported Supported These strategies could have prevented 98% of attacks in 2014 and 2015 Aug 4-6, 2015 Orlando, Florida, USA 6
7 Effectiveness of Cybersecurity Technology ACL (Access Control List) WEAK STRONG According to third party analysts, data diodes provide the highest level of network security next to physical separation (air gap) Aug 4-6, 2015 Orlando, Florida, USA 7
8 Three Ways Data Diodes Support Various DHS Strategies 1. One-Way Communications Out of the Plant Build a Defendable Environment: Segment networks and restrict host-to-host paths Reduce Attack Surface Area: use a data diode to provide network segmentation Implement Secure Remote Access: Implement monitoring only with access enforced by data diodes 2. One-Way Communications Into the Plant Configuration/Patch Management: Provide secure configuration/patch management program centered on safe importation of trusted patch updates 3. Two-Way Communications with the Plant Reduce Attack Surface Area: If bidirectional communication is needed use a single port over a restricted path Aug 4-6, 2015 Orlando, Florida, USA 8
9 Implementing the Three Uses Aug 4-6, 2015 Orlando, Florida, USA 9
10 What is a Data Diode? Hardware based cybersecurity designed to be only One-way Impervious to software changes or attacks (hardware cannot change) Defends the perimeter of the source network Transfers data out of the protected network Security Boundary Data (Historian, files, Syslog, SNMP) securely transferred out of the network Data Diode Bad actors prevented from accessing Source Network OT Network Destination Network IT Network Aug 4-6, 2015 Orlando, Florida, USA 10
11 How does it work? Data Diode products are separated into two halves with on diode on each side working together to create a DualDiode Blue - send only side Red - receive only side Specific circuitry allows each side to only perform a single task Physically prevents data from ever moving in the opposite direction LED Optical Data Transfer Photo detector Send-Only Data Diode Receive-Only Data Diode Aug 4-6, 2015 Orlando, Florida, USA 11
12 DualDiode Architecture OT Network DualDiode Technology Source Destination Ethernet IP Proxy Optical Air Gap IP Proxy Ethernet Send-Only Data Diode Communication Card ATM transport Receive-Only Data Diode Communication Card Hardware DualDiode, two communication cards in series Creates optical air gap and enforces network separation IP Proxies terminate and originate IP traffic One-way hardware constrained by single fiber optic cable IT Network Aug 4-6, 2015 Orlando, Florida, USA 12
13 What do Data Diodes look like? 1U single box solution DIN rail single box solution Server based PCIe card kit solution Aug 4-6, 2015 Orlando, Florida, USA 13
14 But the DualDiode is just the foundation Menu management only no command line Separate blind routing tables Role Based Access Controls Physically separate admin access to each side Physical separation fans, power supplies, network connections White Listing Routable information (MAC, IP addresses) never transferred Only the Payload is transferred Protocol Break - ATM protocol used for data transport Air Gap created between Source and Destination networks Owl data diodes form a Defense In Depth solution Aug 4-6, 2015 Orlando, Florida, USA 14
15 Critical Infrastructure Use Cases Water, Wastewater HMI Screen replication Historian data Power Generation Turbine, Nuclear, Fossil, Hydro plant performance data Historian replication Secure remote monitoring syslog, alarms, events Substations, T&D Secure monitoring of alarms, events, syslog messages Transfer of Files, , security video Oil and Gas Transfer of historian data, alarms, events Interfaces: MODBUS, OPC, Financial Services ATM machines, data repositories Remote branch transfers to HQ, DB replication Compliance Reporting Transfer of consolidated information Aug 4-6, 2015 Orlando, Florida, USA 15
16 Typical Water/Wastewater Architecture End Users End Users OPC Server Historian Alarm / Event Server Historian, Syslog & other data OPC Server Historian Alarm / Event Server OT Network Data Diode Segmentation Security Boundary Replicate Historian, Syslog & other data IT/Corp Network Supports simple and easy security and established data replication flows Aug 4-6, 2015 Orlando, Florida, USA 16
17 Multi-Facility Architecture Historian, Syslog & other data End Users End Users System A System B System C Historian, Syslog & other data OT Networks Aug 4-6, 2015 Orlando, Florida, USA Replicate Historian, Syslog & other data IT/Corp Network 17
18 Range of Supported Vendors ABB Cisco Dell General Electric Honeywell IBM Industrial Defender InStep edna Invensys Wonderware McAfee Mitsubishi PAS Alarm Company Rockwell Automation Rockwell Collins Rolls Royce Schneider Electric Scientech Siemens Stratus Symantec Tripwire Aug 4-6, 2015 Orlando, Florida, USA 18
19 Support for Critical Infrastructure Vendor Applications Supported Transfer Applications Fox Guard Patch Management GE Proficy Historian GE OSM Support PAS Alarm Management Schneider RemoteWatch Schneider Wonderware edna Historian Schneider Wonderware Historian Scientech R*Time OSIsoft PI historian Rockwell Automation RSLinx Classic FactoryTalk Gateway FactoryTalk Historian Rolls Royce PMS Aug 4-6, 2015 Orlando, Florida, USA 19
20 Supported Interfaces and Protocols Supported Protocols Alerts and Events (SMTP) FTP/SFTP Modbus OPC Foundation Certified, Supporting DA, A&E Remote File Transfer for Reporting, Alarms, Events Remote HMI Screen Replication SQL Database Replication SNMP Traps Syslog Transfer TCP Transfers UDP, Multicast, Broadcast, Unicast (Data Transfer and Video) Ability to interface and transfer a wide range of data types, protocols and formats for a variety of situations Aug 4-6, 2015 Orlando, Florida, USA 20
21 Summary Firewalls are being hacked every day Defense In Depth is imperative Department of Homeland Security is recommending: Multiple Strategies Data Diodes Data Diodes are: Hardware-based cybersecurity Impervious to software attacks Deployed in numerous scenarios globally Aug 4-6, 2015 Orlando, Florida, USA 21
NERC-CIP CAN-0024: Securing Critical Cyber Assets with Data Diodes
NERC-CIP CAN-0024: Securing Critical Cyber Assets with Data Diodes Andrew Ginter Director of Industrial Security Waterfall Security Solutions Proprietary Information -- Copyright 2012 2011 by Waterfall
Use Case: Data Diode Cybersecurity Implementation Protects Water Utility OT Network
Use Case: Data Diode Cybersecurity Implementation Protects Water Utility OT Network Four Step Process to Network Cybersecurity & Providing Remote User/Data Access Standards Certification Education & Training
ICALEPCS 2013 San Francisco
UNIDIRECTIONAL SECURITY GATEWAYS Unidirectional Security Gateways Stronger Than Firewalls ICALEPCS 2013 San Francisco Andrew Ginter VP Industrial Security Waterfall Security Solutions Proprietary Information
RasGas Use Case: Owl DualDiode Solution
RasGas Use Case: Owl DualDiode Solution Presented by Dennis Lanahan Owl Computing Technologies Mayan Shah RasGas Company Limited Agenda Webinar Series and Partner Solution Showcase Introduction RasGas
Centralized Control System Architecture
Centralized Control System Architecture Standards Certification Education & Training Publishing Conferences & Exhibits Speakers: Hassan Ajami, PE CAP Anil Gosine 2016 ISA Water / Wastewater and Automatic
Presenter Jakob Drescher. Industry. Measures used to protect assets against computer threats. Covers both intentional and unintentional attacks.
Presenter Jakob Drescher Industry Cyber Security 1 Cyber Security? Measures used to protect assets against computer threats. Covers both intentional and unintentional attacks. Malware or network traffic
No compromises for secure SCADA Communications even over 3rd Party Networks
No compromises for secure SCADA Communications even over 3rd Party Networks The Gamble of Using ISP Private Networks How to Stack the Odds in Your Favor Standards Certification Education & Training Publishing
Securing Industrial Control Systems
L OCKHEED MARTIN Whitepaper Securing Industrial Control Systems The Basics Abstract Critical infrastructure industries such as electrical power, oil and gas, chemical, and transportation face a daunting
Network Architectural Design for Cybersecurity in a Virtual World
Network Architectural Design for Cybersecurity in a Virtual World Standards Certification Education & Training Publishing Conferences & Exhibits Kenneth Frische aesolutions 2016 ISA Water / Wastewater
An Overview of ISA-99 & Cyber Security for the Water or Wastewater Specialist
An Overview of ISA-99 & Cyber Security for the Water or Wastewater Specialist Standards Certification Education & Training Publishing Conferences & Exhibits Speakers: Bryan L. Singer, CISM, CISSP, CAP
Comprehensive Networking Solutions
Comprehensive Networking Solutions End to End Networking Solutions in the Water and Wastewater Sectors Standards Certification Education & Training Publishing Conferences & Exhibits Aug 5-7, 2014 Orlando,
What s new in PI System Security?
What s new in PI System Security? Presented by Brian Bostwick Kevin Geneva The Seven Most Dangerous New Attack Techniques SANS: Alan Paller, Ed Skoudis, Michael Assante, Johannes Ullrich 1. Ransomware
T22 - Industrial Control System Security
T22 - Industrial Control System Security PUBLIC Copyright 2017 Rockwell Automation, Inc. All Rights Reserved. 1 Holistic Approach A secure application depends on multiple layers of protection and industrial
ICS Security. Trends, Issues, and New Standards. Speaker: David Mattes CTO, Asguard Networks
ICS Security Trends, Issues, and New Standards Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: David Mattes CTO, Asguard Networks 2013 ISA Water / Wastewater and
Firewalls (IDS and IPS) MIS 5214 Week 6
Firewalls (IDS and IPS) MIS 5214 Week 6 Agenda Defense in Depth Evolution of IT risk in automated control systems Security Domains Where to put firewalls in an N-Tier Architecture? In-class exercise Part
Municipality Moves SCADA System from Desktop Computers to Terminal Services
Municipality Moves SCADA System from Desktop Computers to Terminal Services Standards Certification Education & Training Publishing Conferences & Exhibits Speakers: Bosko Bob Loncar 2014 ISA Water / Wastewater
Connectivity 101 for Remote Monitoring Systems
Connectivity 101 for Remote Monitoring Systems Paul Wacker Moxa, Inc. Manager - Edge Connectivity Ariana Drivdahl Moxa, Inc. Product Marketing Manager Pain Points of Remote Monitoring Pressure to enhance
SECURE INFORMATION EXCHANGE: REFERENCE ARCHITECTURE
SECURE INFORMATION EXCHANGE: REFERENCE ARCHITECTURE MAY 2017 A NEXOR WHITE PAPER NEXOR 2017 ALL RIGHTS RESERVED CONTENTS 3 4 5 6 8 9 10 11 12 14 15 16 INTRODUCTION THREATS RISK MITIGATION REFERENCE ARCHITECTURE
Detection and Analysis of Threats to the Energy Sector (DATES)
Detection and Analysis of Threats to the Energy Sector (DATES) Sponsored by the Department of Energy National SCADA Test Bed Program Managed by the National Energy Technology Laboratory The views herein
Cyber Security Bryan Owen PE Principal Cyber Security Manager October 11, 2016
Cyber Security Bryan Owen PE Principal Cyber Security Manager October 11, 2016 Agenda Overview What s new in PI Security Demo What s coming next Call to Action 2 Cyber Security is more of a Marathon than
Security Issues and Best Practices for Water Facilities
Security Issues and Best Practices for Water Facilities Standards Certification Jeff Hayes Business Development Manager Beijer Electronics Education & Training Publishing Conferences & Exhibits 2013 ISA
Deployments of Unidirectional Communication between ICS OT & Corporate IT
SESSION ID: CIN-T07 Deployments of Unidirectional Communication between ICS OT & Corporate IT Gilles Loridon CEO Global Security Network Content Unidirectional Communication: introduction to the technology
Cyber Security Brian Bostwick OSIsoft Market Principal for Cyber Security
Cyber Security Presented by Brian Bostwick OSIsoft Market Principal for Cyber Security Cyber Security Trauma in the News Saudi Aramco Restores Network After Shamoon Malware Attack Hacktivist-launched virus
Cybersecurity. Can Standards Bring Clarity from the Confusion? Speaker: David Doggett
Cybersecurity Can Standards Bring Clarity from the Confusion? Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: David Doggett 2014 ISA Water / Wastewater and Automatic
BeOn Security Cybersecurity for Critical Communications Systems
WHITEPAPER BeOn Security Cybersecurity for Critical Communications Systems Peter Monnes System Design Engineer Harris Corporation harris.com #harriscorp TABLE OF CONTENTS BeOn Security... 3 Summary...
Practical SCADA Cyber Security Lifecycle Steps
Practical SCADA Cyber Security Lifecycle Steps Standards Certification Jim McGlone CMO, Kenexis Education & Training Publishing Conferences & Exhibits Bio Jim McGlone, CMO, Kenexis GICSP ISA Safety & Security
IEC A cybersecurity standard approaching the Rail IoT
IEC 62443 A cybersecurity standard approaching the Rail IoT siemens.com/communications-for-transportation Today s Siemens company structure focusing on several businesses Siemens AG Power and Gas (PG)
Merge physical security and cybersecurity for field operations.
Security Gateway Merge physical security and cybersecurity for field operations. Small form factor and wide temperature range for cabinet installation on distribution poles and in substation yards. Accelerometer,
SCADA Upgrades to Otay Water Treatment Plant
SCADA Upgrades to Otay Water Treatment Plant Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: Dr. Noune Garounts 2012 ISA Water & Wastewater and Automatic Controls
PROTECTING MANUFACTURING and UTILITIES Industrial Control Systems
PROTECTING MANUFACTURING and UTILITIES Industrial Control Systems Mati Epstein Global Sales Lead, Critical Infrastructure and ICS [Internal Use] for Check Point employees 1 Industrial Control Systems (ICS)/SCADA
IndusSec. Industrial Network Security System. 9three Solutions Inc.
IndusSec Industrial Network Security System 9three Solutions Inc. Market Forces Social / Cultural Change Economic Changes Generational change - > Data availability is expected and Individuals are more
ABB Process Automation, September 2014
ABB Process Automation, September 2014 ABB Process Automation Services Services that add life to your products, systems and processes September 26, 2014 Slide 1 1 ABB Process Automation Services A proven
Addressing Cyber Threats in Power Generation and Distribution
Addressing Cyber Threats in Power Generation and Distribution VEO, Asko Tuomela o Bachelor of Science in Electrical Power Engineering o Over 6 years experience in power projects, PLCs and supervision systems
Reinventing the Role of the SCADA Historian
Reinventing the Role of the SCADA Historian Distributed Redundancy, Centralized Access Standards Certification Education & Training Publishing Conferences & Exhibits Speakers: Blair Sooley, M. B. A., P.
ABB Ability Cyber Security Services Protection against cyber threats takes ability
ABB Ability Cyber Security Services Protection against cyber threats takes ability In today s business environment, cyber security is critical for ensuring reliability of automation and control systems.
IBM Secure Proxy. Advanced edge security for your multienterprise. Secure your network at the edge. Highlights
IBM Secure Proxy Advanced edge security for your multienterprise data exchanges Highlights Enables trusted businessto-business transactions and data exchange Protects your brand reputation by reducing
ANATOMY OF AN ATTACK!
ANATOMY OF AN ATTACK! Are Your Crown Jewels Safe? Dom Kapac, Security Evangelist WHAT DO WE MEAN BY CROWN JEWELS? Crown jewels for most organizations are critical infrastructure and data Data is a valuable
COLLABORATIVE SECURITY. Network Security Endpoint Security Data Security
COLLABORATIVE SECURITY Network Security Endpoint Security Data Security 40+ countries 35% industrial ac4vi4es 20+ Years of Experience 15 000+ customers 900+ partners Key Customers A Global Solution for
Future Challenges and Changes in Industrial Cybersecurity. Sid Snitkin VP Cybersecurity Services ARC Advisory Group
Future Challenges and Changes in Industrial Cybersecurity Sid Snitkin VP Cybersecurity Services ARC Advisory Group Srsnitkin@ARCweb.com Agenda Industrial Cybersecurity Today Scope, Assumptions and Strategies
Top 10 ICS Cybersecurity Problems Observed in Critical Infrastructure
SESSION ID: SBX1-R07 Top 10 ICS Cybersecurity Problems Observed in Critical Infrastructure Bryan Hatton Cyber Security Researcher Idaho National Laboratory In support of DHS ICS-CERT @phaktor 16 Critical
PROTECTION FOR WORKSTATIONS, SERVERS, AND TERMINAL DEVICES ENDPOINT SECURITY NETWORK SECURITY I ENDPOINT SECURITY I DATA SECURITY
PROTECTION FOR WORKSTATIONS, SERVERS, AND TERMINAL DEVICES ENDPOINT SECURITY NETWORK SECURITY I ENDPOINT SECURITY I DATA SECURITY OUR MISSION Make the digital world a sustainable and trustworthy environment
Using Defense in Depth to Safely Present SCADA Data for Read-Only and Corporate Reporting. Rick Bryson
Using Defense in Depth to Safely Present SCADA Data for Read-Only and Corporate Reporting Rick Bryson 2017 by Schweitzer Engineering Laboratories, Inc. All rights reserved. All brand or product names appearing
Cyber Security Defense-In-depth RICH KINAS ORLANDO UTILITIES COMMISSION COMPLIANCE SPRING WORKSHOP MAY 9-10, 2017
1 Cyber Security Defense-In-depth RICH KINAS ORLANDO UTILITIES COMMISSION COMPLIANCE SPRING WORKSHOP MAY 9-10, 2017 Overview 2 Defense-In-Depth Verses layered defense Verses Enhanced Security NERC Reliability
Multi-Layered Security Framework for Metro-Scale Wi-Fi Networks
Multi-Layered Security Framework for Metro-Scale Wi-Fi Networks A Security Whitepaper January, 2004 Photo courtesy of NASA Image exchange. Image use in no way implies endorsement by NASA of any of the
Designing and Building a Cybersecurity Program
Designing and Building a Cybersecurity Program Based on the NIST Cybersecurity Framework (CSF) Larry Wilson lwilson@umassp.edu ISACA Breakfast Meeting January, 2016 Designing & Building a Cybersecurity
Hardcore PI System Hardening
Hardcore PI System Hardening Jozef Sujan, Lubos Mlcoch 1 Agenda 1. No-nonsense approach to Cyber Security 2. The Power of... PowerShell 3. Deadly Sins of PI Administrators Note: All examples in this presentation
Simplifying Information Sharing Across Security Boundaries. Deep-Secure Overview 12 th November 2013, Prague. Presentation to.
Simplifying Information Sharing Across Security Boundaries Presentation to Deep-Secure Overview 12 th November 2013, Prague 10 October 2011 1 What we do Deep-Secure offer solutions that help organisations
What s New in PI Security?
What s New in PI Security? Presented by Bryan Owen PE Felicia Mohan Agenda Overview What s new Demo What s coming next Call to Action 3 Cyber Security is more of a Marathon than a Sprint Release Cadence
Introduction. Deployment Models. IBM Watson on the IBM Cloud Security Overview
IBM Watson on the IBM Cloud Security Overview Introduction IBM Watson on the IBM Cloud helps to transform businesses, enhancing competitive advantage and disrupting industries by unlocking the potential
Dr. Johan Åkerberg, ABB Corporate Research, Sweden, Communication in Industrial Automation
Dr. Johan Åkerberg, ABB Corporate Research, Sweden, 2014-11-20 Communication in Industrial Automation Outline Industrial Applications Industrial Automation Safety vs. Security Safety Critical Communication
Toward Open Source Intrusion Tolerant SCADA. Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania
Toward Open Source Intrusion Tolerant SCADA Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania Outline What is SCADA? SCADA Vulnerabilities What is Intrusion Tolerance? Prime PvBrowser Our
Identity-Based Cyber Defense. March 2017
Identity-Based Cyber Defense March 2017 Attackers Continue to Have Success Current security products are necessary but not sufficient Assumption is you are or will be breached Focus on monitoring, detecting
Russian Cyber Attack Warning and Impact on AccessEnforcer UTM Firewall
Russian Cyber Attack Warning and Impact on AccessEnforcer UTM Firewall 1 U.S. and U.K. authorities last week alerted the public to an on-going effort to exploit network infrastructure devices including
Cybersecurity Overview
Cybersecurity Overview DLA Energy Worldwide Energy Conference April 12, 2017 1 Enterprise Risk Management Risk Based: o Use of a risk-based approach for cyber threats with a focus on critical systems where
Cybersecurity for IoT to Nuclear
Seminar Series Cybersecurity for IoT to Nuclear Fred Cohn, Program Director Property of Schneider Electric Who Am I? Program Director, Schneider Electric Product Security Office Cybersecurity Strategy
Security by Default: Enabling Transformation Through Cyber Resilience
Security by Default: Enabling Transformation Through Cyber Resilience FIVE Steps TO Better Security Hygiene Solution Guide Introduction Government is undergoing a transformation. The global economic condition,
Industrial Security - Protecting productivity. Industrial Security in Pharmaanlagen
- Protecting productivity Industrial Security in Pharmaanlagen siemens.com/industrialsecurity Security Trends Globally we are seeing more network connections than ever before Trends Impacting Security
INDUSTRIAL SECURITY STORMSHIELD PROTECTION FOR OPERATIONAL NETWORKS. Unified Threat Management and Next-Generation Firewalls Solutions
INDUSTRIAL SECURITY STORMSHIELD PROTECTION FOR OPERATIONAL NETWORKS Unified Threat Management and Next-Generation Firewalls Solutions Our mission To make the digital world a sustainable and trustworthy
Getting the Most from Your SCADA Data
Getting the Most from Your SCADA Data Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: Emile Richard 2015 ISA Water / Wastewater and Automatic Controls Symposium
Introduction to ICS Security
Introduction to ICS Security Design. Build. Protect. Presented by Jack D. Oden, June 1, 2018 ISSA Mid-Atlantic Information Security Conference, Rockville, MD Copyright 2018 Parsons Federal 2018 Critical
Industry Best Practices for Securing Critical Infrastructure
Industry Best Practices for Securing Critical Infrastructure Cyber Security and Critical Infrastructure AGENDA - Difference between IT and OT - Real World Examples of Cyber Attacks Across the IT/OT Boundary
Investor Presentation CAT, INC. Ground Breaking Cyber Security Solutions. Cyber Attack: A Global Phenomenon
Investor Presentation CAT, INC. Ground Breaking Cyber Security Solutions Cyber Attack: A Global Phenomenon CAT, INC Summary: Cyber Advanced Technology, Inc. R & D Lab Offering 7-10 Year Next Generation
Verizon Software Defined Perimeter (SDP).
Verizon Software Defined Perimeter (). 1 Introduction. For the past decade, perimeter security was built on a foundation of Firewall, network access control (NAC) and virtual private network (VPN) appliances.
10 KEY WAYS THE FINANCIAL SERVICES INDUSTRY CAN COMBAT CYBER THREATS
10 KEY WAYS THE FINANCIAL SERVICES INDUSTRY CAN COMBAT CYBER THREATS WHITE PAPER INTRODUCTION BANKS ARE A COMMON TARGET FOR CYBER CRIMINALS AND OVER THE LAST YEAR, FIREEYE HAS BEEN HELPING CUSTOMERS RESPOND
NIST Cybersecurity Framework Protect / Maintenance and Protective Technology
NIST Cybersecurity Framework Protect / Maintenance and Protective Technology Presenter Charles Ritchie CISSP, CISA, CISM, GSEC, GCED, GSNA, +6 Information Security Officer IT experience spanning two centuries
Statement for the Record
Statement for the Record of Seán P. McGurk Director, Control Systems Security Program National Cyber Security Division National Protection and Programs Directorate Department of Homeland Security Before
Who Goes There? Access Control in Water/Wastewater Siemens AG All Rights Reserved. siemens.com/ruggedcom
WEAT Webinar Who Goes There? Access Control in Water/Wastewater Siemens AG 2018. siemens.com/ruggedcom ACCESS CONTROL WEBINAR TABLE OF CONTENTS TOPIC Why Access Control? Risks If Not Used Factors of Authentication
COMPUTER SECURITY DESIGN METHODOLOGY FOR NUCLEAR FACILITY & PHYSICAL PROTECTION SYSTEMS
NUCLEAR REGULATORY AUTHORITY, GHANA COMPUTER SECURITY DESIGN METHODOLOGY FOR NUCLEAR FACILITY & PHYSICAL PROTECTION SYSTEMS Nelson K. Agbemava ICT and Computer Security Section Head Instrumentation & ICT
Training and Certifying Security Testers Beyond Penetration Testing
Training and Certifying Security Testers Beyond Penetration Testing Randall W. Rice, CTAL (Full), CTAL-SEC Director, ASTQB Board of Directors www.astqb.org Most organizations do not know the true status
Implementing Microsoft Internet Security and Acceleration Server 2004
Implementing Microsoft Internet Security and Acceleration Key Data Course #: 2824 Number of Days: 5 Format: Instructor-Led Certification Track: This course will also help to prepare individuals pursuing
INFORMATION EXCHANGE GATEWAYS: REFERENCE ARCHITECTURE
INFORMATION EXCHANGE GATEWAYS: REFERENCE ARCHITECTURE MAY 2017 A NEXOR WHITE PAPER NEXOR 2017 ALL RIGHTS RESERVED CONTENTS 3 4 5 6 7 8 11 12 13 14 15 INTRODUCTION IEG SCENARIOS REFERENCE ARCHITECTURE ARCHITECTURE
Why Should You Care About Control System Cybersecurity. Tim Conway ICS.SANS.ORG
Why Should You Care About Control System Cybersecurity Tim Conway ICS.SANS.ORG Events Example #1 Dec 23, 2015 Cyber attacks impacting Ukrainian Power Grid Targeted, synchronized, & multi faceted Three
Regional Seminar Series Orlando. Critical Facilities Update
Regional Seminar Series Orlando Critical Facilities Update November 4, 2009 Robert Wheatley, OSIsoft Alexis Stobbe, OSIsoft Empowering Business in Real Time. Copyright 2009, OSIsoft, LLC. All rights Reserved.
6. Appendix II Monitoring Cyber Physical Systems
6. Appendix II Monitoring Cyber Physical Systems While the work in OPTET focuses on Socio Technical Systems, many of the issues related to Trust and Trustworthiness are also relevant to other domains.
Cyber security - why and how
Cyber security - why and how Frankfurt, 14 June 2018 ACHEMA Cyber Attack Continuum Prevent, Detect and Respond Pierre Paterni Rockwell Automation, Connected Services EMEA Business Development Manager PUBLIC
Digital Wind Cyber Security from GE Renewable Energy
Digital Wind Cyber Security from GE Renewable Energy BUSINESS CHALLENGES The impact of a cyber attack to power generation operations has the potential to be catastrophic to the renewables industry as well
10 FOCUS AREAS FOR BREACH PREVENTION
10 FOCUS AREAS FOR BREACH PREVENTION Keith Turpin Chief Information Security Officer Universal Weather and Aviation Why It Matters Loss of Personally Identifiable Information (PII) Loss of Intellectual
Introducing the 9202-ETS MTL Tofino industrial Ethernet security appliance
Introducing the 9202-ETS MTL Tofino industrial Ethernet security appliance HAKIM- Sales Engineer 1 Cybersecurity of valuable assets and processes in a wide range of industry verticals, such as: Oil & Gas
CLICK TO EDIT MASTER TITLE RECENT STYLE APT CAMPAIGN TARGETING ENERGY SECTOR ASSETS
National Cybersecurity and Communications Integration Center (NCCIC) Hunt and Incident Response Team (HIRT) CLICK TO EDIT MASTER TITLE RECENT STYLE APT CAMPAIGN TARGETING ENERGY SECTOR ASSETS Jonathan
Vulnerabilities in Process Control Networks: What Are We Protecting Against?
Vulnerabilities in Process Control Networks: What Are We Protecting Against? Mark Benedict Ultra Electronics, 3eTI Standards Certification Education & Training Publishing Conferences & Exhibits 2014 ISA
Sobering statistics. The frequency and sophistication of cybersecurity attacks are getting worse.
Sobering statistics The frequency and sophistication of cybersecurity attacks are getting worse. 146 >63% $500B $3.8M The median # of days that attackers reside within a victim s network before detection
SEL-3620 ETHERNET SECURITY GATEWAY
ETHERNET SECURITY GATEWAY STRONG ACCESS CONTROL FOR YOUR ELECTRONIC SECURITY PERIMETER Firewall Ethernet WAN SEL-421 SEL Relays Serial Ethernet Security Gateway Real-Time Automation Controller (RTAC) SEL-3530
CCNA Cybersecurity Operations 1.1 Scope and Sequence
CCNA Cybersecurity Operations 1.1 Scope and Sequence Last updated June 18, 2018 Introduction Today's organizations are challenged with rapidly detecting cybersecurity breaches and effectively responding
Alternatives to Patching for more Secure and Reliable Control Systems
Alternatives to Patching for more Secure and Reliable Control Systems Eric Byres, P.Eng., ISA Fellow Chief Technology Officer Tofino Security, a Belden Brand The New World of Security For the past 30 years,
DNP3 for Water Systems
DNP3 for Water Systems United Water New Jersey Use Case Standards Certification Education & Training Publishing Conferences & Exhibits Speaker: Keith Kolkebeck 2015 ISA Water / Wastewater and Automatic
Indegy. Industrial Cyber Security. ISA New Orleans Section. Applying the NIST Framework February 6, 2018
Indegy Industrial Cyber Security ISA New Orleans Section Applying the NIST Framework February 6, 2018 Agenda 1. Introductions 2. Indegy Background 3. NIST Background and History with ICS 4. What is the
Securing IEDs against Cyber Threats in Critical Substation Automation and Industrial Control Systems
Securing IEDs against Cyber Threats in Critical Substation Automation and Industrial Control Systems Eroshan Weerathunga, Anca Cioraca, Mark Adamiak GE Grid Solutions MIPSYCON 2017 Introduction Threat
DEVELOP YOUR TAILORED CYBERSECURITY ROADMAP
ARINC cybersecurity solutions DEVELOP YOUR TAILORED CYBERSECURITY ROADMAP Getting started is as simple as assessing your baseline THE RIGHT CYBERSECURITY SOLUTIONS FOR YOUR UNIQUE NEEDS Comprehensive threat
Industrial Control Systems (In)Security & Suricata
Industrial Control Systems (In)Security & Suricata Founded in 2013 Headquartered in Denver, Colorado, U.S. Leadership industry veterans from McAfee, Palo Alto Networks, Symantec More than $70 million in
CCNA Cybersecurity Operations. Program Overview
Table of Contents 1. Introduction 2. Target Audience 3. Prerequisites 4. Target Certification 5. Curriculum Description 6. Curriculum Objectives 7. Virtual Machine Requirements 8. Course Outline 9. System
SCADA Control and Monitoring Of Groundwater Remediation Facilities: Past, Present and Planning For the Future
SCADA Control and Monitoring Of Groundwater Remediation Facilities: Past, Present and Planning For the Future Standards Certification Education & Training Publishing Conferences & Exhibits Speakers: Obadiah
PROFINET The leading communication system
Titel einer Beispielpräsentation PROFINET The leading communication system Proven and future-oriented PROFINET 2 3 4 Market & Applications PROFINET overview 0 Reasons for PROFINET Industrie 4.0 and PROFINET
Cybersecurity Risk Mitigation: Protect Your Member Data. Introduction
Cybersecurity Risk Mitigation: Protect Your Member Data Presented by Matt Mitchell, CISSP Knowledge Consulting Group Introduction Matt Mitchell- Director Risk Assurance 17 years information security experience
CIP-014. JEA Compliance Approach. FRCC Fall Compliance Workshop Presenter Daniel Mishra
CIP-014 JEA Compliance Approach FRCC Fall Compliance Workshop Presenter Daniel Mishra Acronyms & Terminologies DHS Department of Homeland Security JEA It s not an acronym JSO Jacksonville Sheriff's Office
4 Access to devices. Prof. Dr. H. Kirrmann. ABB Research Centre, Baden, Switzerland
Automation Industrielle Industrielle Automation 4 Access to devices 4.3 OPC (Open Process Control formerly OLE for Process Control) 4.3.1 Common elements Prof. Dr. H. Kirrmann 2007 May, HK ABB Research
The Claroty Difference
Solution Brief Bringing Clarity To OT Network Claroty enables customers to secure and optimize the industrial control networks that run the world s most critical infrastructure. The company s enterprise-class
ENDPOINT SECURITY STORMSHIELD PROTECTION FOR WORKSTATIONS. Protection for workstations, servers, and terminal devices
ENDPOINT SECURITY STORMSHIELD PROTECTION FOR WORKSTATIONS Protection for workstations, servers, and terminal devices Our Mission Make the digital world a sustainable and trustworthy environment while ensuring
Industrial Defender ASM. for Automation Systems Management
Industrial Defender ASM for Automation Systems Management INDUSTRIAL DEFENDER ASM FOR AUTOMATION SYSTEMS MANAGEMENT Industrial Defender ASM is a management platform designed to address the overlapping
Critical Infrastructure
Critical Infrastructure 1 Critical Infrastructure Can be defined as any facility, system, or function which provides the foundation for national security, governance, economic vitality, reputation, and
Challenges and Opportunities in Cyber Physical System Research
Homeland Security Advanced Research Projects Agency Challenges and Opportunities in Cyber Physical System Research Dec 11, 2013 ACSAC Panel Dr. Dan Massey Program Manager Cyber Security Program Areas Trustworthy