Thank You, Next! Protecting Next-Generation OT Networks
summary
OT networks now host 10–100x more compute, widespread embedded OS devices like Raspberry Pi, and cloud data lakes, so the Purdue DMZ alone is insufficient. MITRE publishes ATT&CK for ICS (Feb 2021) and the recommended architecture adds level 3.5 and 4.5 DMZs for industrial security and shared services, uses IAM as a service, PLC/PLa configuration control, network segmentation, monitoring for IOCs, and staged SOAR automation to detect and rapidly contain attacks.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:38What's an OT Network, Anyway?
- 5:41Ideal OT Network Architecture: The Purdue Model
- 9:15Increasing OT Network Complexity
- 14:49The Future of OT Networking.
- 18:26Ways in which OT Networks are Changing
- 20:27Converging IT/OT Security
- 21:36New MITRE ATT&CK for Industrial Control Systems
- 22:55Zero Trust for OT Networking
- 25:25Identity and Access Management (IAM)
- 28:00Monitoring for OT Networks
- 31:19Security Orchestration and Automated Response (SOAR)
- 32:34PLA / PLC Configuration Control
- 33:51Secure OT Clouds and Data Lakes
- 35:50The OT Network of the Future...
- 37:19Apply What You Have Learned!
related talks
48mYou Too Can Secure OT
50mHarmonizing IT and OT Security in the Era of Convergence
53mCXO Panel: OT & IoT Risk Management Strategy For CISOs
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity
52mPanel: Industrial Systems In The Crosshairs: What It Really Takes To Defend OT
32mIntelligence Sharing for Critical Infrastructure Resiliency
31m20/20 Security Vision: Managing Digital Risk in the Era of IoT
22mAttacking SDN Infrastructure: Are We Ready for the Next-Gen Networking?