Cyber Defense eMagazine January Edition for 2022

More documents

Recommendations

Info

OT/IT Security – Two Sides of the Same Coin By Sachin Shah, CTO of OT, Armis The distinction between information technology (IT) and operational technology (OT) is rapidly converging as the Industrial Internet of Things (iIoT) – with cross-boundary traffic pollination from enterprise-connected devices, applications, and connectivity of all types – proliferates across the Federal ecosystem. Agencies have long managed and secured these two types of technologies in distinct silos, using different approaches and solutions, sharing little data, and relying on management by distinct teams with unique skill sets. They have also largely relied on control segmented networks to protect OT devices. The convergence of IT and OT is closing that gap, and in doing so is making the legacy siloed security model increasingly outdated and risky. Although many legacy control systems still maintain effective segmented networks, the trend is to connect OT devices on the edge directly to the enterprise network. As a result, the Purdue Enterprise Reference Architecture model, which for years indicated a standard hierarchy of applications, controls, data flows, and enforcement boundaries, is being flattened and the lines between levels are dissolving. Today, agencies simply can’t secure OT without securing IT along with it. Cyber Defense eMagazine – January 2022 Edition 74 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
The industry is already embracing a more integrated approach to IT/OT security, with Gartner projecting “by 2025, 75 percent of OT security solutions will be delivered via multifunction platforms interoperable with IT security solutions.” Gartner further notes that “brownfield operational technology/information technology convergence acceleration and a growing number of greenfield cyber-physical systems push OT security needs to evolve, and more IT security leaders to become involved, as threats and vulnerabilities increase.” Today’s agencies need a passive and agentless security approach that secures all types of connected devices—OT, IT, and IoT devices. It needs to be able to: ● ● ● ● Generate a comprehensive inventory of all connected devices – OT & IT Today’s enterprises still struggle to see their complete IT asset inventory – from managed to unmanaged to IoT devices, from virtual machines to clouds, and more. Most organizations cannot accurately identify all of the devices in their environment and airspace – on-premises and on the edge – leaving them exposed to compliance, vulnerability, and security issues. Ensure that all devices and technology are discoverable IT teams depend on asset discovery and configuration transparency to ensure visibility into the environments they manage. If the IT team cannot see a device, they cannot securely manage it. Therefore, government agencies must ensure discoverability – with the ability to track IT and OT devices in real-time – identifying critical information, such as location, users, which applications they are using, and more. Deliver comprehensive coverage for security controls, devices, and communication. The security controls should meet most of the important cybersecurity goals specified by security frameworks such as NIST CSF or CIS CSC, and NISTIR 8228. In the IT world, this typically requires the use of several different security tools. For the OT environment, it would be desirable to obtain comprehensive coverage of the required security controls using as few tools as possible. The security platform should work for all types and brands of devices common to agencies and their facilities, including IP security cameras, fire alarm systems, switches, firewalls, wireless access points, printers, and more. Finally, the platform must be able to directly monitor all communication pathways that could be used by a cyber attack, including Ethernet, Wi-Fi, Bluetooth, BLE, and possibly other wireless protocols such as Zigbee. Wireless coverage is important because attackers can exploit vulnerabilities such as BlueBorne, KRACK and Broadpwn to compromise OT devices over the air, without any user interaction. Identify risks associated with every device Beyond discovering the assets, agencies require a platform that enables them to identify risks and vulnerabilities for devices in the office, at remote locations, as well as those interacting with cloud environments. This requires understanding what a device is and how it is being used and an inherent understanding of device characteristics. The organization must then be able to compare the device’s individual risk profile with the agency’s risk posture to provide security and policy enforcement. Automation is critical to ensure accuracy and efficiency when managing environments with tens of thousands of devices and counting. Cyber Defense eMagazine – January 2022 Edition 75 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
“Owning Your Identity” Through
Page 3 and 4:
WatchGuard Technologies’ 2022 Pre
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - January 2
Page 9 and 10:
MUST ATTEND REPLAY AVAILABLE ON-DEM
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24: Cyber Defense eMagazine - January 2
Page 39 and 40: But in spite of this threat, consum
Page 41 and 42: How To Thwart Fraud with Phone Numb
Page 43 and 44: mutable and dynamic by continually
Page 45 and 46: Phishing: How To Improve Cybersecur
Page 47 and 48: organizations gather data all in on
Page 49 and 50: offers comprehensive firmware prote
Page 51 and 52: Why Hackers Attack Mobile Devices a
Page 53 and 54: the network. This is a good indicat
Page 55 and 56: About the Author Nicole Allen, Mark
Page 57 and 58: Know your customer As spam and phis
Page 59 and 60: Microsoft Successfully Defended The
Page 61 and 62: However, you can’t rely 100% on t
Page 63 and 64: Why Americans Joined Europe in Not
Page 65 and 66: Have a good backup policy. A good p
Page 67 and 68: Secure Apart from reporting, the af
Page 69 and 70: Taking a hard look at the current s
Page 71 and 72: There are plenty of organizations t
Page 73: 5. The impact of the talent shortag
Page 77 and 78: WatchGuard Technologies’ 2022 Pre
Page 79 and 80: Users, especially professionals, ha
Page 81 and 82: What Are DeFi Flash Loans & How to
Page 83 and 84: DeFi hackers can easily exploit fla
Page 85 and 86: 3. Get audited Getting a smart cont
Page 87 and 88: Protecting Critical Infrastructure
Page 89 and 90: • They use penetration tools to g
Page 91 and 92: Three Key Facts About AI-Driven Net
Page 93 and 94: About the Author Eyal Elyashiv is t
Page 95 and 96: Tyler Farrar, CISO, Exabeam “What
Page 97 and 98: Protecting unstructured data will l
Page 99 and 100: change again before they’re done.
Page 101 and 102: Samantha Humphries, head of securit
Page 103 and 104: Due to their successes, adversaries
Page 105 and 106: Paul Farrington, chief product offi
Page 107 and 108: In 2022, it is going to become cruc
Page 109 and 110: Our Cyber Defenses Need to Be Battl
Page 111 and 112: the exploitation aspect, but if tes
Page 113 and 114: 12 Tips for Improving Access Contro
Page 115 and 116: weak passwords. Password management
Page 117 and 118: Four Cybersecurity Predictions Fede
Page 119 and 120: 4. Cyber Funding Gets Granular In F
Page 121 and 122: Of course, these recommendations ar
Page 123 and 124: Cybersecurity Tips to Help Your Org
Page 125 and 126:
Organizations can achieve true cybe
Page 127 and 128:
quarter. Put simply, any organizati
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Free Monthly Cyber Defense eMagazin
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
THE Q1/Q2 GAME CHANGER… CYBERDEFE
show all

Cyber Defense eMagazine January Edition for 2022

Create successful ePaper yourself

Delete template?

Save as template?