Cybersecurity
Size and complexity are the enemies of cybersecurity
In cybersecurity we are always faced with the chance that our system harbors some, unknown vulnerability, and the possibility that vulnerability will be discovered by some malicious actor who will then use it against our system,…
The Value of ICS Security
Nearly every presentation I give has at least a few audience members acknowledging to me that they weren’t really conscious of their own reliance on Industrial Control Systems (ICS) in so many aspects of their daily…
A Historical Perspective on IT & OT Convergence
IT and OT convergence has been debated for over a decade, yet secure IIoT connectivity remains unfinished. Matt Morris of NexDefense traces how ICS/SCADA attacks, from Stuxnet through Industroyer and CrashOverride, forced organizations to move beyond…
IoT Devices – with greater connectivity comes greater vulnerabilities
Greater IoT connectivity creates greater cybersecurity vulnerabilities across three attack categories: cyber-physical attacks on devices such as insulin pumps and connected cars, theft of personally identifiable information (PII), and Distributed Denial of Service (DDoS) attacks. A…
Industrial Espionage is a major threat to the Manufacturing Sector
Industrial espionage targets manufacturing, pharmaceuticals, and chemicals by stealing trade secrets, proprietary processes, and corporate intellectual property. According to the Verizon Data Breach Investigations Report, manufacturing is the top industry targeted by cyberespionage, and trade secrets…
Protecting IIoT with a New Approach to Cyber Defense
Measure, monitor and monetize has long been a mantra for any industry or corporation that wants to be successful with its products or services. This capability is finally ubiquitous thanks to technology being powerful enough and cost…
Stop Downplaying Threats to Critical Infrastructure
Threats to Industrial Control Systems and critical infrastructure are escalating. Galina Antova, Claroty co-founder and former global head of industrial security at Siemens, states that counter-spin dismissing ICS threats can be as damaging as the FUD…
Industrial Cyber Security: Why IT & OT collaboration is no longer an option but a necessity
IT and OT collaboration is necessary for industrial cybersecurity because IT security teams hold the security knowledge while OT teams hold the domain expertise to assess how security measures affect industrial control systems. Without C-Level involvement,…
Thoughts on the on-going global cyber attacks as they affect ICSs
Industrial Control Systems face a persistent and worsening cyber threat that existing standards fail to fully address. According to Joseph Weiss, PE, CISM, CRISC and ISA Fellow, malware such as CrashOverride, BlackEnergy, and Havex has targeted…
ICS cybersecurity experts: back up all your data to protect yourself against Petya ransomware
Petya ransomware spreads by exploiting the EternalBlue vulnerability in Microsoft Windows, the same flaw used by WannaCry weeks earlier. ICS cybersecurity experts, including Dr. Ulrich Lang of ObjectSecurity, Edgard Capdevielle of Nozomi Networks, and Bryan Singer…
How will ICS cybersecurity standards be impacted by IIoT?
The Industrial Internet of Things (IIoT) poses direct questions for ICS cybersecurity standards. The ISA99 committee, which governs the ISA and IEC 62443 series, has identified over 500 normative security requirements, with at least 125 addressing…
Securing Industrial IoT: There is no simple answer
Securing Industrial IoT (IIoT) is harder than securing traditional IT systems because IIoT devices, which include Industrial Control Systems (ICS), Operational Technology (OT), building automation, sensors, and embedded systems, follow no single security standard. They often…