How to Secure Your Control System
This paper will provide an overview of the IT security issues in industrial control systems. General security concepts, objectives, best practices, and mitigation strategies will also be discussed.
In the past, control systems used proprietary protocols, and were typically confined in an isolated, stand-alone environment. Today, because of the wealth of valuable information they contain, control systems are being connected to enterprise networks to allow business users access to real-time plant data. Since most modern control systems rely heavily on commercial operating systems and open standards such as Ethernet, TCP/IP, and web technologies that were originally developed for the business environment, this interconnectivity has introduced risks that did not exist in the past. This integration, however, is not without its risks.