1© Dell Technologies 2019. All rights reserved.

2© Dell Technologies 2019. All rights reserved.

OT & IT CRITICAL INFRASTRUCTURE: OVERVIEW OF THREATS AND ATTACKS

Leonard Kleinman

Chief Cyber Security Advisor, RSA

3© Dell Technologies 2019. All rights reserved.

4© Dell Technologies 2019. All rights reserved.

Control Systems Defined

SCADA PCS IACS DCSICS

5© Dell Technologies 2019. All rights reserved.

6© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

7© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

8© Dell Technologies 2019. All rights reserved.

9© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

10© Dell Technologies 2019. All rights reserved.

The Internet of Things

11© Dell Technologies 2019. All rights reserved.

Digital Transformation - Convergence

Enterprise IT

OT, (ICS and SCADA)

Internet of Things

OT/IT

Convergence

IT/IoT

Convergence

IoT/OT

Convergence

Networking:

• Ethernet, IP, Wifi,

Modbus, Profibus,

DNP3, Gateways

• FOG-Edge Computing

• Mobile broadband

The Things:

• Smart devices

• Embedded Micro

Sensors

• Wearable Tech

• Actuators

• Web APIs/REST APIs

• Mobile Apps

Data:

• Cloud Infrastructure

• Big data predictive &

analytics engines

• IoT Platforms

• Machine Learning and

A.I.

12© Dell Technologies 2019. All rights reserved.

The Price of Connectivity

Types of Incidents

Source: The Cost of Incidents Affecting CIIs 2016: ENISA

?

13© Dell Technologies 2019. All rights reserved.

Considerations for an improved Cyber Posture

14© Dell Technologies 2019. All rights reserved.

1. The trend of convergence goes

beyond IT-ICS convergence:

extends to the convergence of IoT

and SIS – more risk.

2. Most attacks on OT systems tend

to go through the enterprise IT

environments.

3. The attack cycle is very similar for

ICS/Control Systems and

traditional enterprise IT systems.

4. Basic cyber hygiene continues to

be sadly lacking.

5. Visibility is the main problem.

15© Dell Technologies 2019. All rights reserved.