WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:0 00:06.320 --> 00:13.640 All right, now, what is OT? 00:13.670 --> 00:17.900 Iot, Internet of Things, OT operational technology. 00:17.920 --> 00:19.840 This is where we start talking about 00:19.870 --> 00:25.420 industrial control systems, managing water, gas, electric, sewer, and so forth. 00:25.450 --> 00:27.640 Ot is the software and hardware designed 00:27.670 --> 00:31.480 to detect or cause changes in industrial operations, direct monitoring and 00:31.510 --> 00:34.100 controlling of industrial physical devices. 00:34.130 --> 00:37.160 It consists of industrial control systems 00:37.180 --> 00:40.360 to monitor and control industrial operations. 00:40.390 --> 00:47.400 In general, your ICS, the security in industrial control systems is oftentimes 00:47.430 --> 00:50.920 pretty reliant on the fact it's a closed network. 00:50.950 --> 00:57.120 Like everything else, it evolves with functionality and ease of use. 00:57.150 --> 01:00.940 A lot of your OT systems run on legacy platforms. 01:00.970 --> 01:03.960 For example, remember the colonial 01:03.990 --> 01:09.570 pipeline hack not too long ago, the systems that are running the legacy 01:09.600 --> 01:13.480 software are often no longer supported by the vendor. 01:13.510 --> 01:19.400 The reason for that, typically, is it costs a lot of money to redevelop these 01:19.430 --> 01:24.400 applicationsto run on newer operating systems, and they'd rather not pay for the 01:24.430 --> 01:28.920 coding of the new applications, and they'll still work with older, non 01:28.920 --> 01:30.840 supported versions of Windows, for example. 01:30.870 --> 01:34.700 You might see some 2003 systems still out there or even older. 01:34.730 --> 01:39.680 Those, again, have reached the end of their support life cycle. 01:39.680 --> 01:42.780 If vulnerabilities are discovered, they're not typically patched. 01:42.810 --> 01:46.720 A lot of this stuff is dependent on the fact that you can't get to it. 01:46.750 --> 01:52.240 But there's almost always a pivot point somewhere where you can get to an admin 01:52.270 --> 01:56.540 workstation, for example, and then use that to pivot to the OT network. 01:56.570 --> 01:58.480 Essential terminology, assets. 01:58.510 --> 02:00.440 Assets, again, are anything of value. 02:00.470 --> 02:02.780 Ot systems typically consist of physical 02:02.810 --> 02:06.760 assets, sensors, actuators, servers, workstations, network devices, and again, 02:06.790 --> 02:09.100 they all work together in an OT environment. 02:09.130 --> 02:10.300 Zones and conduits. 02:10.330 --> 02:14.640 Network segregation technique used to isolate the networks and assets imposed 02:14.670 --> 02:17.220 and maintain strong access control mechanisms. 02:17.250 --> 02:21.920 Industrial network, network of automated control systems, and a business network, 02:21.950 --> 02:25.500 systems that offer information infrastructure to the business. 02:25.530 --> 02:27.920 The protocols. 02:27.950 --> 02:32.020 Protocols used for serial communications and communication over standard Ethernet. 02:32.040 --> 02:34.960 Network perimeter is the outermost boundary of a network zone. 02:34.990 --> 02:36.600 We've talked about that before. 02:36.630 --> 02:38.680 Electronic security perimeter, the 02:38.710 --> 02:40.920 boundary between secure and insecure zones. 02:40.950 --> 02:44.920 Critical infrastructure, any collection of physical or logical systems that will 02:44.950 --> 02:48.560 severely impact the safety security economy or public health. 02:48.590 --> 02:51.020 Now, not too long ago, we had an event 02:51.040 --> 02:53.920 here in Florida that had to do with the water treatment plant. 02:53.950 --> 02:56.340 That wasn't good. 02:56.370 --> 02:58.340 It or OT Convergents. 02:58.370 --> 03:04.560 Integration of IT and OT systems into a single model bridge the gap between the 03:04.590 --> 03:08.380 technologies for improving overall security, efficiency and productivity. 03:08.400 --> 03:11.840 There's probably not much more to talk about on that slide here, but you're 03:11.870 --> 03:17.220 talking about the combination or the consolidation of both or interoperability. 03:17.250 --> 03:19.610 Introduction to ICS. 03:19.640 --> 03:21.260 Industrial control systems. 03:21.290 --> 03:25.500 Probably your best examples of ICS is SCADA. 03:25.530 --> 03:29.900 Scada stands for supervisory control and data acquisition. 03:29.930 --> 03:34.360 It communicates with the entire network, 03:34.390 --> 03:40.600 modems, programmable logic controllers, PLCs themselves will typically interface 03:40.630 --> 03:44.900 with the physical world and perform some programmatic function. 03:44.930 --> 03:49.880 The PLC is a module power supply and I O modules, and it's a little solid state 03:49.880 --> 03:53.180 computer where instructions can be customized to perform a specific task. 03:53.210 --> 03:57.760 These touch the physical world. 03:57.880 --> 04:01.640 Okay, so if it's computer controlled and I can talk to it, I can hack it. 04:01.670 --> 04:03.720 If it interfaces with the physical world, 04:03.750 --> 04:06.520 that means I can reach out and hack the physical world. 04:06.550 --> 04:09.420 That's what that all boils down to. 04:09.440 --> 04:12.920 Again, when you think of things like biomedical devices, pace makers, insulin 04:12.950 --> 04:16.720 pumps, things like that, you could actually kill somebody. 04:16.750 --> 04:17.800 That's scary. 04:17.830 --> 04:25.320 If it has to do with power grids and pipelines and electric grids, gas, sewer, 04:25.340 --> 04:29.760 water, electric, and so forth, or water treatment plants, again, you can 04:29.780 --> 04:34.820 introduce toxins to the supply area, whatever, shut things down. 04:34.840 --> 04:38.040 We're pretty heavily dependent on electrical grids these days. 04:38.040 --> 04:40.800 So if it's computer controlled, I can talk to it, I can hack it.