The International OT Security Organizations.
A couple of notables here, OTCA, OTISAC
are different groups committed to providing appropriate security policies
and insights in the improving security resilience of critical infrastructures.
Now, again, I've done some assessments on IoT, OT, really haven't deployed much, so
I can't give you a lot of first hand experience with security.
I've never been responsible for it, but I've attacked them, and I know that we
attack them roughly the same way we attack everything else.
Same process, scanning, vulnerability
identification, exploitation, getting access, documentation reporting.
Ot's security solutions.
Firewalls, we've talked about.
Firewalls should be used to control access incoming and outgoing.
Again, if I get to it and talk to it, I can attack it.
Unified Identity and OT Access Management.
Centralized operations, securing, changing, removing user accounts.
That's I am for all intents and purposes.
Asset inventory and device authorization
ensures that only authorized devices are connected to the network.
Ot monitoring and anomaly detection again
deploys machine learning algorithms, easy detection, identification malicious
behaviors, that's IDS, and decoys to deceive attackers.
It's honey pots. We've talked about honey pots.
The honey pot, again, is a lightning rod,
a decoy learning mechanism, early warning system.
Any interaction with the honey pot is
automatically considered to be suspicious since it's not real.
One example of an OT security tool, Flowmon, allows you to ensure the
reliability of your industrial networks, avoid downtime, disruption of service
continuity, and that's remote monitoring, profile analysis.
Really haven't done much with that.
But there are other products like Tenable, F ootScout, Fortinet, and Nozomi.
All all right, so IoT and OT, computing systems.
A lot of the same concerns, security
concerns, as I've mentioned in some personal stories, and we attack them and
secure them roughly the same way as any other type of computing system.
All right, so that's going to wrap us up for Module 13, IoT and OT Security.