(CS)2AI Online Seminar: So You Think You Can Scan (PLCs)
Wednesday, October 2nd, 2024: 1:00 PM to 2:30 PM
Cyber monitoring of industrial networks, known as OT Monitoring or OT Visibility, was introduced to the security market by modeling after Network-based Intrusion Detection Systems (NIDS), resulting in what we refer today as Network-based OT Monitoring
Virtual
Soon afterwards, however, it was discovered that passive monitoring alone generates asset inventories with considerable gaps, incomprehensible network maps, and ill-defined vulnerabilities. To address some of these limitations, many vendors decided to augment their products with an active approach.
Asset owners are often told that this active approach is a simulation of the day-to-day communications between endpoints, primarily PLCs, and their engineering software, thus posing minimal operational risk. Unfortunately, to date, there has been limited research on this subject, and asset owners are left with only the empirical evidence from vendors and / or peers.
To address this gap and provide asset owners with an informed view on the active approach of OT Monitoring, this session will demonstrate the impact of different types of scanning on some of the most common PLCs. By using a systematic analysis, asset owners' fears and vendors' claims are finally put to test.
Hosted by Miami Cyber Security for Control Systems