Report Spotlights ICS Cyber Security Vulnerabilities

Jan. 19, 2018
Bedrock Automation releases an informative white paper on the cyber security vulnerabilities and defense of industrial control systems.

Bedrock Automation releases new white paper.

Bedrock Automation, maker of the Open Secure Automation (OSA) platform, releases a white paper on the cyber security vulnerabilities and defense of industrial control systems. The 20-page document, Securing Industrial Control Systems - Best Practices, covers the threat landscape and presents a holistic approach to defending it, including assessing risk, physical security, network security, workstation and server security and the fundamentals of OSA.

“As we discuss cyber security with users of automation, we find that many are aware of the threat potential but are not sure if they are doing enough to protect themselves,” says Albert Rooyakkers, Bedrock founder and CEO.  “We saw the need for a technical paper that explains both the mindset and motives of an attacker, as well as the tools and technologies of defense.” 

The first half of the paper covers conventional cyber security practices that apply to all industrial control systems. It provides an assessment of the threats, including drive-by attacks, advanced persistent threats (APTs), espionage, process attacks and ransomware. It also looks at assessing the related risks, with an introduction to process hazards analysis (PHA) and hazards and operability (HAZOP) methodologies used to identify malfunctions that might harm people, the process or the environment. To assist with risk assessment, the paper provides an overview of conventional protection practices. This includes network segmentation, firewalls and DMZs; managing workstations, servers, end-users and applications; and implementing active defense measures, including security event monitoring and management.

The second part of the paper is devoted to more recent techniques, based on the application of intrinsic cyber security advances that have been applied in military, aerospace and ecommerce, and are now being used to protect industrial control systems. These create a hardware end-point root of trust that combines advanced cryptography, digital signing techniques, an industrial certificate authority and public key infrastructure (PKIs) built into the control system to create an infrastructure for user defense. The paper also presents the features of the Bedrock Open Secure Automation platform.

To download the paper, visit:

Sponsored Recommendations

Heat Recovery: Turning Air Compressors into an Energy Source

More than just providing plant air, they're also a useful source of heat, energy savings, and sustainable operations.

Controls for Industrial Compressed Air Systems

Master controllers leverage the advantages of each type of compressor control and take air system operations and efficiency to new heights.

Discover Your Savings Potential with the Kaeser Toolbox

Discover your compressed air station savings potential today with our toolbox full of calculators that will help you determine how you can optimize your system!

The Art of Dryer Sizing

Read how to size compressed air dryers with these tips and simple calculations and correction factors from air system specialists.