why (control system) cyber- shareit, october 5 …...why (control system) cyber-security sucks…...

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)

DIY

.DE

SP

AIR

.CO

M



ShareIT, October 5th 2018, Valmiera (LV)“Control System” in a Nutshell

Industrial Control System (ICS) Safety System



ShareIT, October 5th 2018, Valmiera (LV)“Cyber-Security” in a Nutshell

http://i.imgur.com/rGtgr.jpg



ShareIT, October 5th 2018, Valmiera (LV)Overview



ShareIT, October 5th 2018, Valmiera (LV)Mankind’s Curiosity…

"CM

B T

imelin

e300 n

o W

MA

P"

by N

AS

A/W

MA

P S

cie

nce T

eam

-O

rigin

al v

ers

ion: N

AS

A;

modifie

d b

y R

yan K

ald

ari

. Lic

ensed u

nder

Public D

om

ain



ShareIT, October 5th 2018, Valmiera (LV)Mankind. Literally.



ShareIT, October 5th 2018, Valmiera (LV)Creating Big Bang Conditions



ShareIT, October 5th 2018, Valmiera (LV)Controlling a JediTM Lightsaber



ShareIT, October 5th 2018, Valmiera (LV)The Large Hadron Collider (LHC)



ShareIT, October 5th 2018, Valmiera (LV)The ATLAS “camera” (open)



ShareIT, October 5th 2018, Valmiera (LV)3D “Photo” of a LHC Collision



ShareIT, October 5th 2018, Valmiera (LV)Return on Investment

François Englert Peter W. Higgs



ShareIT, October 5th 2018, Valmiera (LV)More than the LHC…



ShareIT, October 5th 2018, Valmiera (LV)AMS: A Detector in Space



ShareIT, October 5th 2018, Valmiera (LV)(R)Evolution of Control Systems



ShareIT, October 5th 2018, Valmiera (LV)CERN: 100+ of (commercial) ICSes

Experiments:ALICE, ATLAS,

CMS, LHCb,

LHCf, Moedal,

TOTEM

Alfa, AMS,

Asacusa, Atrap,

Cast, Collaps,

Compass, Dirac,

GIF, ISOLTRAP,

MICE, Miniball,

Mistral, NA49,

NA60, NA62,

nTOF, Witch, …

GCS, MCS,

MSS, Cryo

Accelerator Infrastructure:ACS, ADT, APWL, BCTDC, BCTF, BDI,

BQE, BQS, BQK, BPAWT, BIC, BLM,

BOF, BPL, BPM, BOB, BRA, BSRT, BTV,

BWS, Cryo, CWAT, FGC, LEIR LLRF, LHC

Beam Control, LBDS, LHC Logging

Service, LTI, MKQA, OASIS, PIC,

QDS/QPS, SPS BT, Vacuum, WIC

Accelerators:AD, AWAKE, CLIC3,

Elena, FCC, ILC,

ISOLDE, LEIR, LHC,

Linac 2/3/4, PS, PS

Booster, SPS

Safety: ACIS, AC PS1, AC PS2, AC SPS1, AC SPS2, ADS, Alarm

Repeater, ARCON, CCTV, CESAR, CSA, CSAM, DSS, LACS, LASER,

LASS, MSAT, RAMSES, Radio Protection Service, SFDIN, SGGAZ, Sniffer,

SUSI, TIM

Infrastructure: CV, DBR, ENS, FM, Gamma Spectroscopy, Moni, Moon,

Spectrum, TS/CSE, YAMS



ShareIT, October 5th 2018, Valmiera (LV)CERN: Examples of ICS Devices



ShareIT, October 5th 2018, Valmiera (LV)ICS (aka IoT) @Home. Fail?

Solar Power Converter

Sony HiFi

WiiU

Surround System

Apple TV

Sony TV



ShareIT, October 5th 2018, Valmiera (LV)ICS/IoT@World. Fail!



ShareIT, October 5th 2018, Valmiera (LV)And also CERN is target…



ShareIT, October 5th 2018, Valmiera (LV)The Internet of Stupid Things



ShareIT, October 5th 2018, Valmiera (LV)Evolution vs. Security



ShareIT, October 5th 2018, Valmiera (LV)Wireless to the Plant Floor :-(



ShareIT, October 5th 2018, Valmiera (LV)Network Segregation



ShareIT, October 5th 2018, Valmiera (LV)Computer Centre Segregation



ShareIT, October 5th 2018, Valmiera (LV)Development vs. Operations



ShareIT, October 5th 2018, Valmiera (LV)Controls in the Cloud



ShareIT, October 5th 2018, Valmiera (LV)AuthN & AuthZ



ShareIT, October 5th 2018, Valmiera (LV)Train Security at Plant Floor



ShareIT, October 5th 2018, Valmiera (LV)



ShareIT, October 5th 2018, Valmiera (LV)The Problem 2.0 & CERNs Approach



ShareIT, October 5th 2018, Valmiera (LV)Thank you… Questions?

why (control system) cyber- shareit, october 5 …...why (control system) cyber-security sucks…...

Documents