Putting Industrial Control System Operators In The Security Driving Seat
Industrial Controls is a coined term that encompasses a number of control systems that are present, predominantly within industrial production. These controls are managed through remote stations, both automated and operator driven, distributing commands to manage supervision, control and production.
However, as industrial controls manage power, transport, water, gas and other critical infrastructure, the potential disruption and resulting downtime from any issue to these systems can have a significant impact to national infrastructure.
This was explicitly highlighted in the Ukraine power station hack that took place in late 2015. Phishing emails were sent to the power companies containing malware that permitted the exfiltration of information and credentials to control systems, cutting off power to nearly 250,000 homes and businesses in western Ukraine. Full story..