nach oben

Erschienen in:

2016 | OriginalPaper | Buchkapitel

4. Operational Technology and Information Technology in Industrial Control Systems

verfasst von : Adam Hahn

Erschienen in: Cyber-security of SCADA and Other Industrial Control Systems

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

A modern ICS is a complex system that depends on many different components and technologies to monitor and control physical processes; along with many of the managerial, administrative, and regulatory responsibilities associated with this task. The heart of ICSs are operations technology (OT) which supports availability and safety of critical processes. Modern-day ICSs have incorporated information technology (IT) based on the system functions desired in the overall system. For reference, definitions of each are as follows:

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Wireless Infrastructure in Industrial Control Systems

Nächstes Kapitel Threats in Industrial Control Systems

Abrams, M., & Weiss, J. (2007, September). Bellingham, Washington, control system cyber security case study. National Institute of Standards and Technology (NIST). Retrieved from http://csrc.nist.gov/groups/SMA/fisma/ics/documents/Bellingham_Case_Study_report%2020Sep071.pdf.

Abrams, M., & Weiss, J. (2008). Malicious control system cyber security attack case study–Maroochy water services. Australia: National Institute of Standards and Technology (NIST). Retrieved from http://csrc.nist.gov/groups/SMA/fisma/ics/documents/Maroochy-Water-Services-Case-Study_report.pdf.

American Gas Association (AGA). (2006, March 14). Report No. 12. Cryptographic protection of SCADA communications part 1: Background, policies and test plan.

Barnes, R., Thomson, M., Pironti, A., Langley, A. (2015, June). Deprecating secure sockets layer version 3.0. Internet Engineering Task Force (IETF). Retrieved from https://tools.ietf.org/html/rfc7568.

Bradley, I., Ciufo, J., Cooperberg, A., Tavener, C. (2007, June). Life-cycle management for system protection. Transmission & Distribution World Magazine.

Cisco. (2015). Cisco smart + connected city Wi-Fi: The foundation of urban services. Retrieved from http://www.cisco.com/web/strategy/docs/smart-connected-city-network-aag.pdf.

Columbus, L. (2013, May 6). 10 ways cloud computing is revolutionizing manufacturing. Forbes. Retrieved from http://www.forbes.com/sites/louiscolumbus/2013/05/06/ten-ways-cloud-computing-is-revolutionizing-manufacturing/.

Department of Homeland Security (DHS) (2011, May). Common cybersecurity vulnerabilities in industrial control systems.

Gartner. (2011, March) Gartner says the worlds of IT and operational technology are converging. Retrieved from http://www.gartner.com/newsroom/id/1590814.

Gartner IT Glossary. (2015, August 15). Operational technology. Retrieved from http://www.gartner.com/it-glossary/operational-technology-ot.

Givehchi, O., Trsek, H., Jasperneite, J. (2013, September). Cloud computing for industrial automation systems—A comprehensive overview. IEEE 18th conference on emerging technologies & factory automation (ETFA), September 10–13.

Hauser, C., Manivannan, T., & Bakken, D. (2012, Janaury). Evaluating multicast message authentication protocols for use in wide area power grid data delivery services. 45th Hawaii International Conference on System Science (HICSS), pp. 2151–2158.

Kelly, S. (2006, December). Security implications of using the data encryption standard (DES). Internet Engineering Task Force (IETF). Retrieved from https://tools.ietf.org/html/rfc4772.

Keogh, M., & Cody, C. (2013, February). Cybersecurity for state regulators 2.0. The National Association of Regulatory Utility Commissioners. Retrieved from http://www.naruc.org/Grants/Documents/NARUC%20Cybersecurity%20Primer%202.0.pdf.

Kushner, D. (2013, February 26). The real story of Stuxnet. IEEE spectrum. Retrieved from http://spectrum.ieee.org/telecom/security/the-real-story-of-stuxnet.

Maheshwari, K., Lim, M., Wang, L., Birman, K., & van Renesse, R., (2013, February). Toward a reliable, secure and fault tolerant smart grid state estimation in the cloud. IEEE PES Innovative Smart Grid Technologies (ISGT), 2013.

Merriam-Webster. (2015, August 15). Information technology. Retrieved from http://www.merriam-webster.com/dictionary/information%20technology.

Microsoft. (2011). Coordinated vulnerability disclosure at Microsoft. Retrieved from http://go.microsoft.com/?linkid=9770197.

Microsoft. (2015a, August 15). Windows server update services. Retrieved from https://technet.microsoft.com/en-us/security/bulletin/dn602597.aspx.

Microsoft. (2015b, June 22). Microsoft support lifecycle. Retrieved from https://support.microsoft.com/en-us/lifecycle/search?alpha=Windows%20Server.

Mohagheghi, S., Stoupis, J., & Wang, Z. (2009). Communication protocols and networks for power systems—Current status and future trends. Proceedings of Power Systems Conference and Exposition (PES ’09).

National Institute of Standards and Technology (NIST). (2015). Guide to industrial control system security. Revision 2. Special Publication 800–82.

OpenSSL Release Strategy. (2015, August 9). OpenSSL software foundation. Retrieved from https://www.openssl.org/policies/releasestrat.html.

Oracle. (2015, August 15). Critical patch updates, security alerts and third party bulletin. Retrieved from http://www.oracle.com/technetwork/topics/security/alerts-086861.html.

Popov, A. (2015, February). Prohibiting RC4 cipher suites. Internet Engineering Task Force (IETF). Retrieved from https://tools.ietf.org/html/rfc7465.

San Francisco Public Utilities Commission (SFPUC). (2010, April). SFPUC automated water meter program. Retrieved from http://www.sfwater.org/modules/showdocument.aspx?documentid=13.

Tarreau, W. (2012, April 9). Linux Kernel mailing list. Retrieved from https://lkml.org/lkml/2012/4/9/127.

The White House. (2013, February 12). Presidential policy directive (PPD) 21, Critical infrastructure security and resilience.

Tom, S., Christiansen, D., & Berrett, D. (2008, December). Recommended practice for patch management of control systems. Department of Homeland Security (DHS).

Turner S., & Polk T. (2011a, March). Prohibiting secure sockets layer (SSL) version 2.0. Internet Engineering Task Force (IETF). Retrieved from https://tools.ietf.org/html/rfc6176.

Turner, S., & Polk, T. (2011b, March). RFC 6151, updated security considerations for the MD5 message-digest and the HMAC-MD5 algorithms. Internet Engineering Task Force (IETF). Retrieved from https://tools.ietf.org/html/rfc6151.

U.S. Government Accountability Office (GAO). (2014, September). Cloud computing: Additional opportunities and savings need to be pursued. GA-14-753.

U.S.-Canada Power System Outage Task Force. (2004, April). Final report on the August 14, 2003 blackout in the United State and Canada, causes and recommendations.

Verizon. (2015). Helping the city of Charlotte envision a more sustainable future. Retrieved from http://www.verizonenterprise.com/resources/casestudies/cs_helping-the-city-of-charlotte_en_xg.pdf.

Zeller, M. (2011). Myth or reality—Does Aurora vulnerability pose a risk to my generator? Schweitzer Engineering Laboratories. Texas A&M Conference for Protection Relay Engineers.

Titel: Operational Technology and Information Technology in Industrial Control Systems
verfasst von: Adam Hahn
Verlag: Springer International Publishing
Buch: Cyber-security of SCADA and Other Industrial Control Systems
Print ISBN: 978-3-319-32123-3

Electronic ISBN: 978-3-319-32125-7

Copyright-Jahr: 2016
DOI: https://doi.org/10.1007/978-3-319-32125-7_4

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"