Gone are the days when a control network was an isolated communications systems that served a relatively small part of an overall operation. Today, Ethernet networks are rapidly gaining a foothold in the industrial manufacturing and process control industries. Many, if not most, of these networks have become critical to the day to day operation and cash flow into the companies accounts. The desire to automate processes, rapidly share information, and have remote access, require that the once isolated network be connected to the outside world. In "Security Fundamentals for the Industrial Ethernet Network", we look at the tools Control Engineers and Corporate IT Professionals can utilize to create a secure communications environment that allows the companies to operate while protecting their most valuable resource - information.
Prerequisites - Ethernet 201, or strong working knowledge of Ethernet technology. |
- A Process Control Network (PCN) model
- What's it look like?
- How is it different?
- Identifying PCN Vulnerabilities
- Identifying the Enemy
- PCN Security Objectives
- A Look Inside the Attackers Play Book
- Reconnaissance
- Denial of Service
- Access Attacks
- The first step, a security policy
- Network security, an on going process
- A proposed PCN to EN Interconnection Topology
- Monitoring for unauthorized access and activities
- Intrusion Detection Systems
- A Security Check List
|
- A Multilayer approach to PCN security
- Securing the PCN assets (Secure)
- Physical Security - Who has access?
- Controllers - Securing the Unsecured, can it be done?
- Computers - Locking them down!
- Switches - What to do with unused ports?
- Wireless Access Points - Who am I allowing to connect?
- Remote Access - Allowing Others Access
- The AAA concept
- Routers and Access Control Lists (ACL)
- Firewalls - Separating the Trusted from the Un-trusted
- Virtual Private Network (VPN) - Encryption and its many uses
|
