Gotta Keep Em Separated! Wait, but do we though? Well maybe not so much.

Presented at CackalackyCon 1 (2019), June 1, 2019, 11 a.m. (60 minutes)

Industrial Control Systems (ICS) is the infrastructure in facilities that provide us with power, treat our drinking water and manage our city & town traffic system(s). Due to the need for a 100% uptime of these critical infrastructures, monitoring of data in the ICS network has to be constant. IT OT convergence covers the ways we can integrate Information Technology and Operations Technology in order to meet the demands of modern-day standards of system, network and security monitoring & diagnostics to cloud systems. At the moment, the way that communications are being remote off network traffic is being handled is through a process referred to as “air gapping” in which the Supervisory Control And Data Acquisition network (SCADA for short) on its own segmented network allows access to the internet for small periods of time. And these communications, updates etc, happen in an asynchronous manner. For true IT OT convergence to happen, the air-gap needs to be bridged, and the way that data comes in and out of the SCADA network needs to be very protected and handled in a scrutinous manner in all perimeter layers. However, what is happening right now is that these networks and devices are being exposed and placed RIGHT onto the open internet, where anyone can observe and sometimes interact with these systems and devices that constitute these systems. This presentation will cover ways that these systems are compromised, and some ways to “Take home” to secure the air-gap between IT and OT.

Presenters:

Links:

Similar Presentations: