Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Cybersecurity Application Installation with no Shutdown Required webinar Slides
Similar to Cybersecurity Application Installation with no Shutdown Required webinar Slides (20)
More from Yokogawa1
More from Yokogawa1 (20)
Recently uploaded
Recently uploaded (20)
Cybersecurity Application Installation with no Shutdown Required webinar Slides
- 1. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation The names of corporations, organizations, products and logos herein are either registered trademarks or trademarks of Yokogawa Electric Corporation and their respective holders. Cybersecurity Application Installation with No Shutdown Required 3
- 2. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Presenter 1 MATT MALONE ICS Cybersecurity Consultant Yokogawa Corporation of America Sugarland, TX matthew.malone@yokogawa. com Matt is the industrial cybersecurity consultant for YCA and has been in the automation industry for the past six years. Over the last three years, he has specialized in ICS cybersecurity to provide the best possible service to clients in this emerging sector. Prior to starting a career in the private sector, Matt spent eight years in the US Navy as an explosive ordnance disposal (EOD) technician and deep sea diver.
- 3. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation TOPICS Update and Threat Overview Solving the Problem Process Cybersecurity Solutions Case study Q&A 1 2 3 4 5
- 4. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Recent ICS Cyber Attacks and Business Impact • 2014 German Steel Mill – catastrophic blast furnace damage • 2016 Unnamed US Water Company - hackers gained control of PLCs • 2017 Maersk – “Notpetya” attack. $250-300M in damage and lost revenue • 2017 Unnamed US Petrochem plant – Triconix attack (Triton), unplanned outage • 2018 Boardwalk – pipeline shut down • 2018 Saipam – “Shamoon” cyber attack, seven day outage • 2019 NorskHydro - $40M loss in production • 2020 Various supply chain attacks and COVID spam campaigns
- 5. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Cyber Attacks and Business Impact • Malware Vectors • 60% of all instances are due to employee error • 65% of employees admit to using weak and re-used passwords • 32% of employees admit to sharing passwords with others • Recycled malware • Unique Challenges • No network visibility • Small maintenance windows • Compliance to different regulations • Starting a program from the ground up
- 6. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation How Do We Solve the Problem? UNCERTAIN LEADING LAGGING CERTAIN Threats Threats Threats Threats Threats Threats Technology Process People Prevention Controls Losses Losses Losses Losses Losses Losses Technology Process People Recovery Controls Incident Result (Past) = Facts Risk (Future) = Impact & Likelihood Easy to measure To late to improve Difficult to measure and easy to Improve Leading Indicators = Measures of Effectiveness Performance Compliance Lagging Indicators = Measures of Effectiveness Performance Compliance
- 7. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Cybersecurity Assessment Why start with the assessment? Simple – 2-3 days Identify unknowns Update network architecture Sustainable – non-recurring cost Secure – can provide immediate notification of compromise Begin the roadmap plan Knowns – malware, zero day attacks, vulnerabilities, threats Unknowns – network architecture, nodes, unmanaged connections
- 8. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation System Hardening Services Why perform System Hardening services? Simple – can be done centrally Sustainable – can be performed during SAT Sustainable – most bang for the buck Default settings ARE NOT the recommended settings Reduces the attack surface by: Restricting non-essential ports (physical and logical) Disabling auto-run Improving user authentication Restricting non-essential network services
- 9. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Antivirus Why Antivirus? 33% of ALL computers have some form of malware* The “black list” for known viruses, Trojans, and worms Effectiveness is directly proportional to the level of updates More than COTS AV Simple Centralized AV servers streamline updates and maintenance Yokogawa tested and verified updates Sustainable - Can prevent recycled cyberattacks *Source: https://www.technewsworld.com/story/80707.html
- 10. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Antivirus
- 11. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Patch Management Why Patch Management? Can prevent recycled cyberattacks and zero day attacks $200M in damages in 2014 from 8 different recycled malware components* Simple Create custom groups of machines which allows administrators to pick and choose certain updates Centralized patch management can update several sites from one corporate location Yokogawa tested and verified Sustainable Bug fixes for OS Reduces bandwidth *Source: https://www.technewsworld.com/story/80707.html
- 12. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Patch Management
- 13. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Application Whitelisting Why whitelisting? Prevents unauthorized programs, scripts, and apps from running Simple Locks down protected end points Yokogawa tested and verified vendors (ex: SS1WL1) Sustainable Runs transparently w/ low overhead Minimal impact
- 14. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Backup and Recovery System (BRS) Why BRS? Consolidate backup storage media in central location DRP/BCP compliance Simple Separate backup traffic from VNET/IP (avoids instability) Easy recovery Sustainable Runs transparently w/ low overhead Minimal impact
- 15. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Secure Remote Connectivity Why VPS Remote? Secure method for offsite maintenance Reduction of travel time and cost Compliance with COVID restrictions Simple VPN technology for secure access Sustainable Minimize mean time to recovery via emergency support Remote monitoring for maintenance or security
- 16. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Wireless Security Why? Threat of packet capture and wireless DoS IIoT expansion Simple LoRaWAN communication protection Edge protection Sustainable Spectrum analyzer testing Security from the sensor to the cloud
- 17. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Case Studies Case Study #1 – Legacy Cryo Station Case Study #2 – Petrochem Plant Challenges No network visability High insurance premiums Industry standards Solution Security assessment via passive data analysis Physical assessment Updated network architecture Cybersecurity roadmap development Challenges – no corporate control for AV updates, short time line Solution Secure remote connection establish to accommodate offsite work Secure architecture design at each site for remote, centralized patch management and AV updates
- 18. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation The names of corporations, organizations, products and logos herein are either registered trademarks or trademarks of Yokogawa Electric Corporation and their respective holders. QUESTIONS?
- 19. | Document Number | June 25, 2018 | © Yokogawa Electric Corporation Event Logistics 21 Email Link with Recording Shortly after the event, you will receive an email containing a link to the recording and be able to download the slidedeck. Short Survey As you exit the webinar, you will have the option to participate in a short survey. Your feedback is very important to us, so please take a minute to complete this. Questions If you have any questions for this Webinar topic, please send them to webinars@us.yokogawa.com