Upload File

4 control system cyber-security workshop · cyber-security workshop . more “discipline” is what...

  • Home
  • Documents
  • 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions
27
4 th Control System Cyber-Security Workshop More “discipline” is what we need. Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from S. Banerin (UW School of Medicine), E. Bonaccorsi (LHCb), E. Carrone (SLAC), P. Chochula (ALICE), S. Gysin (ESS), R. Krempaska (PSI), T. Sugimoto (Spring8), F. Tilaro (CERN) ICALEPCS, San Francisco (California), October 7 th 2013

Upload: others

Post on 28-Jul-2020

3 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

4th Control System Cyber-Security Workshop

More “discipline” is what we need.

Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

S. Banerin (UW School of Medicine), E. Bonaccorsi (LHCb), E. Carrone (SLAC), P. Chochula (ALICE), S. Gysin (ESS),

R. Krempaska (PSI), T. Sugimoto (Spring8), F. Tilaro (CERN) ICALEPCS, San Francisco (California), October 7th 2013

Page 2: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Why Control System Cyber-Security…

Page 3: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Why Control System Cyber-Security…

Switching off the light (CERN conference room)

Page 4: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Why Control System Cyber-Security…

Switching off the light (CERN conference room)

Switching off the light (US cities) http://democrats.energycommerce.house.gov/sites/default/files/

documents/Report-Electric-Grid-Vulnerability-2013-5-21.pdf

Page 5: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Why Control System Cyber-Security…

Switching off the light (CERN conference room)

Switching off the light (US cities) http://democrats.energycommerce.house.gov/sites/default/files

/documents/Report-Electric-Grid-Vulnerability-2013-5-21.pdf

Page 6: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Why Control System Cyber-Security…

Switching off the light (CERN conference room)

Switching off the light (US cities) http://democrats.energycommerce.house.gov/sites/default/files

/documents/Report-Electric-Grid-Vulnerability-2013-5-21.pdf

Switching off accelerators!

Page 7: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

…needs a disciplined approach!

Page 8: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

Page 9: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

Page 10: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…full network segregation & firewalling (Alice, LHCb, PSI)

Page 11: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…full network segregation & firewalling (Alice, LHCb, PSI)

Page 12: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…tightly controlled remote access (Alice, PSI, Spring8) 2FA-Authentication; SSH gateways; shift leader enabled VPN tunnels

…full network segregation & firewalling (Alice, LHCb, PSI)

Page 13: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…tightly controlled remote access (Alice, PSI, Spring8) 2FA-Authentication; SSH gateways; shift leader enabled VPN tunnels

…full network segregation & firewalling (Alice, LHCb, PSI)

Page 14: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…tightly controlled remote access (Alice, PSI, Spring8) 2FA-Authentication; SSH gateways; shift leader enabled VPN tunnels

…fine-grained local access control (Alice, ESS, SPring8) User vs. experts vs. admins; down to Channel Access; role-based

…full network segregation & firewalling (Alice, LHCb, PSI)

Page 15: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

Page 16: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…agreed procedures for data transfer (Alice) Data replication (outgoing), manual file inspection (incoming)

Page 17: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…agreed procedures for data transfer (Alice) Data replication (outgoing), manual file inspection (incoming)

Page 18: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…inventories & configuration management (CERN, PSI) Dependency analysis; Kickstart & Puppet; but patching still too infrequent

…agreed procedures for data transfer (Alice) Data replication (outgoing), manual file inspection (incoming)

Page 19: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…inventories & configuration management (CERN, PSI) Dependency analysis; Kickstart & Puppet; but patching still too infrequent

…agreed procedures for data transfer (Alice) Data replication (outgoing), manual file inspection (incoming)

Page 20: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

With some discipline, people managed to have…

…inventories & configuration management (CERN, PSI) Dependency analysis; Kickstart & Puppet; but patching still too infrequent

…standards & regulations compliance (CERN, SLAC, UW) IEC61850 robustness;800-53(IT) vs. 800-82(ICS); HIPPAA/FERPA/FDA

…agreed procedures for data transfer (Alice) Data replication (outgoing), manual file inspection (incoming)

Page 21: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

Page 22: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

You just need to be disciplined…

Page 23: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

You just need to be disciplined…

…able to prioritize… 1. Safety 2. Availability 3.

Security

Page 24: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

…and bring together what belongs together:

Functionality, usability, availability, maintainability,

and security

You just need to be disciplined…

…able to prioritize… 1. Safety 2. Availability 3.

Security

Page 25: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

…and bring together what belongs together:

Functionality, usability, availability, maintainability,

and security

You just need to be disciplined…

…able to prioritize… 1. Safety 2. Availability 3.

Security

Let’s tackle it JOINTLY!!!

Page 26: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Control System Cyber-Security is feasible!!

…and bring together what belongs together:

Functionality, usability, availability, maintainability,

and security

You just need to be disciplined…

…able to prioritize… 1. Safety 2. Availability 3.

Security

Let’s tackle it JOINTLY!!! https://indico.cern.ch/ conferenceDisplay.py?confId=217457

Page 27: 4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “4th CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2013 ― October 6th 2013

Thank you very much!!!

In particular to ~35 participants &

esp. to all presenters…

…as well as to the Organizing Committee!!!

Presenter
Presentation Notes
arigatō gozaimasu

One Day Workshop On CYBER SECURITY AWARENESS 23rd …beta.nielit.gov.in/imphal/sites/default/files/Imphal/THOUBAL... · One Day Workshop On CYBER SECURITY AWARENESS 23rd February

One Day Workshop On CYBER SECURITY AWARENESS 18th October 2016beta.nielit.gov.in/imphal/sites/default/files/Imphal/C.I College.pdf · One Day Workshop On CYBER SECURITY AWARENESS

Empirical Analysis of the Effects of Cyber Security Incidentsinfosecon.net/workshop/downloads/2007/pdf/... · of cyber security incidents. Given that the measurable effects of cyber

3 rd Control System Cyber-Security Workshop

Cyber Security Workshop - VDI Hochschule Albstadt-Sigmaringen

Ipv6 and cyber security Cisco-DOT workshop - 10th july 2013

Cyber Safety Security Awareness Workshop

Cyber Security & Cyber Resilience Framework Workshop€¦ · Title: Cyber Security & Cyber Resilience Framework Workshop Author: Pravesh Moon (IT\ITRC) Created Date: 7/31/2019 12:09:56

Cyber Security Workshop · Cyber Security Workshop ... Use security software and make sure you set it to update automatically At Home. Hacked Email: What to Do. If you didn't expect

One-Day Workshop On CYBER SECURITY AWARENESS 18th …

Property Section Workshop: Fraud and cyber-security for property practitioners · 2017-05-10 · Property Section Workshop: Fraud and cyber-security for property practitioners Peter

Cyber Security for PROACTIVE STRATEGIES FOR MANAGING … · 4 Register Now -800-882-8684 [email protected] CYBER SECURITY ACCELERATOR WORKSHOP DAY Cyber Security for Wednesday, December

7th Workshop on Cyber Security Experimentation and Test · PDF file7th Workshop on Cyber Security Experimentation and Test (CSET ’14) Sponsored by USENIX, the Advanced Computing

Technology Transfer to Practice in Cyber Security Workshop€¦ · IN CYBER SECURITY WORKSHOP. SRI International Offices. Menlo Park, California February 25 & 26, 2015. 2 . Technology

Cyber Security Workshop - Encrypt Everything!

SAMI & IMCA MARITIME CYBER SECURITY WORKSHOP Development of cyber security guidelines Aron Sorensen, Chief Marine Technical Officer

Proximus - Cyber security workshop - Orbid - 20160602

One Day Workshop On CYBER SECURITY AWARENESS 8th …

Cyber Security Curriculum Workshop - CAE Community Stout CAE Foru… · Cyber Security Curriculum Workshop •November 1 - 2, 2018 •April 4 - 5, 2019 •University of Wisconsin-Stout

One Day Workshop On CYBER SECURITY AWARENESS 4th …

OpenHouse Workshop on Cyber Security Offensive ...OpenHouse Workshop on Cyber Security Offensive/Defensive Boot Camp - 2 Days Theme: Understanding the Cyber Attack Defence Controls

One-Day Workshop On CYBER SECURITY AWARENESS 18th …beta.nielit.gov.in/imphal/sites/default/files/Imphal/RKSANATOMBI REPORT.pdf · 2 A one-day workshop on cyber security awareness

Cyber Security Workshop...Cyber Security Workshop DFARS Clause 252.204-7012 / NIST SP 800-171 June 2019 Prof. Clifford Neuman Director, USC Center for Computer System Security Unclassified

Cyber Security & Cyber Resilience Framework …...Title Cyber Security & Cyber Resilience Framework Workshop Author Pravesh Moon (IT\ITRC) Created Date 7/31/2019 12:09:56 PM

International Security Cyber Issues Workshop Series - · PDF fileFinancial support for the International Security Cyber Issues Workshop ... Program of the entC er or Sf tregic

ATENA H2020 WORKSHOP Measuring Security in Cyber-Physical ... · ATENA H2020 WORKSHOP Measuring Security in Cyber-Physical Systems Thursday –September 27, 2018 Consortium for the

Workshop Digital Forensic - Cyber Security Community

Cyber Security Workshop Ethical Web Hackingcybersecuritycompetition.unitec.ac.nz/files/Ethical_Manual_Web.pdf · Cyber Security Workshop Ethical Web Hacking ... Computer and operating

Global Cyber Security Center | - Newsletter 2017 February · 2019-01-16 · Digitale, Global Cyber Security Center e Gartner Consulting will organize the workshop "Cyber Security

TCCA Cyber Security Workshop

International Security Cyber Issues Workshop Series...International Security Cyber Issues Workshop Series The work of the United Nations (UN) Group of Governmental Experts (GGE) on

Cyber Security Workshop @SPIT- 8th October 2016

WORKSHOP ON Cyber security, CERT & ICANN ECOSYSTEM · WORKSHOP ON Cyber security, CERT & ICANN ECOSYSTEM » Ouagadougou, Burkina Faso, 15 to 19 October 2018 GENERAL INFORMATIONS GENERAL

Workshop „Information Security“ Protecting information efficiently€¦ · ABB ABILITY™ CYBER SECURITY SERVICES Workshop „Information Security“ Protecting information efficiently

R&D Showcase and Technical Workshop: Security Your Cyber Future