© Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS...

15
1 © Dell Technologies 2019. All rights reserved.

Transcript of © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS...

Page 1: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

1© Dell Technologies 2019. All rights reserved.

Page 2: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

2© Dell Technologies 2019. All rights reserved.

OT & IT CRITICAL INFRASTRUCTURE: OVERVIEW OF THREATS AND ATTACKS

Leonard Kleinman

Chief Cyber Security Advisor, RSA

Page 3: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

3© Dell Technologies 2019. All rights reserved.

Page 4: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

4© Dell Technologies 2019. All rights reserved.

Control Systems Defined

SCADA PCS IACS DCSICS

Page 5: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

5© Dell Technologies 2019. All rights reserved.

Page 6: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

6© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

Page 7: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

7© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

Page 8: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

8© Dell Technologies 2019. All rights reserved.

Page 9: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

9© Dell Technologies 2019. All rights reserved.

Who? How? Why?

Bus iness Impact

L o s s o f D a t a / I n f o r m a t i o n

O w n i n g a s s e t s Re p u t a t i o n

D a m a g eL o s s o f Tr u s t

D i s r u p t S e r v i c eF i n a n c i a l L o s s

D e s t r u c t i o n

Page 10: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

10© Dell Technologies 2019. All rights reserved.

The Internet of Things

Page 11: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

11© Dell Technologies 2019. All rights reserved.

Digital Transformation - Convergence

Enterprise IT

OT, (ICS and SCADA)

Internet of Things

OT/IT

Convergence

IT/IoT

Convergence

IoT/OT

Convergence

Networking:

• Ethernet, IP, Wifi,

Modbus, Profibus,

DNP3, Gateways

• FOG-Edge Computing

• Mobile broadband

The Things:

• Smart devices

• Embedded Micro

Sensors

• Wearable Tech

• Actuators

• Web APIs/REST APIs

• Mobile Apps

Data:

• Cloud Infrastructure

• Big data predictive &

analytics engines

• IoT Platforms

• Machine Learning and

A.I.

Page 12: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

12© Dell Technologies 2019. All rights reserved.

The Price of Connectivity

Types of Incidents

Source: The Cost of Incidents Affecting CIIs 2016: ENISA

?

Page 13: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

13© Dell Technologies 2019. All rights reserved.

Considerations for an improved Cyber Posture

Page 14: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

14© Dell Technologies 2019. All rights reserved.

1. The trend of convergence goes

beyond IT-ICS convergence:

extends to the convergence of IoT

and SIS – more risk.

2. Most attacks on OT systems tend

to go through the enterprise IT

environments.

3. The attack cycle is very similar for

ICS/Control Systems and

traditional enterprise IT systems.

4. Basic cyber hygiene continues to

be sadly lacking.

5. Visibility is the main problem.

Page 15: © Dell Technologies 2019. All rights reserved. 1 · 1. The trend of convergence goes beyond IT-ICS convergence: extends to the convergence of IoT and SIS –more risk. 2. Most attacks

15© Dell Technologies 2019. All rights reserved.