Guide to Industrial Control Systems ICS Security 1st edition by Keith Stouffer, Joe Falco, Karen Kent

Guide to Industrial Control Systems (ICS) Security 1st edition by Keith Stouffer, Joe Falco, Karen Kent – Ebook PDF Instant Download/Delivery.
Full download Guide to Industrial Control Systems ICS Security 1st Edition after payment

 

Product details:

Author:         Keith Stouffer, Joe Falco, Karen Kent

“Guide to Industrial Control Systems (ICS) Security” (1st Edition) is a comprehensive resource that provides an in-depth exploration of the security challenges and best practices associated with Industrial Control Systems (ICS). ICS are essential in critical infrastructure sectors like energy, water, transportation, and manufacturing, but their integration with IT systems introduces significant vulnerabilities.

This guide covers topics such as:

• ICS Architecture: An overview of SCADA systems, DCS, PLCs, and the operational components of ICS.
• Threats & Vulnerabilities: A detailed look at the unique risks posed to ICS, comparing them to traditional IT systems, and identifying potential vulnerabilities within the ICS environment.
• Security Program Development: Offers strategies for building a robust ICS security program, including senior management buy-in, risk assessment, and creating security policies and procedures.
• Network Architecture & Defense: Focuses on network segregation, firewall configuration, redundancy, fault tolerance, and the prevention of man-in-the-middle attacks.
• Security Controls: Covers both management and operational security controls, such as personnel security, incident response, media protection, and configuration management.

Guide to Industrial Control Systems ICS Security 1st Table of contents:

1. Introduction

• 1.1 Authority
• 1.2 Purpose and Scope
• 1.3 Audience
• 1.4 Document Structure

2. Overview of Industrial Control Systems

• 2.1 Overview of SCADA, DCS, and PLCs
• 2.2 ICS Operation
• 2.3 Key ICS Components
  • 2.3.1 Control Components
  • 2.3.2 Network Components
• 2.4 SCADA Systems
• 2.5 Distributed Control Systems
• 2.6 Programmable Logic Controllers
• 2.7 Industrial Sectors and Their Interdependencies

3. ICS Characteristics, Threats, and Vulnerabilities

• 3.1 Comparing ICS and IT Systems
• 3.2 Threats
• 3.3 Potential ICS Vulnerabilities
  • 3.3.1 Policy and Procedure Vulnerabilities
  • 3.3.2 Platform Vulnerabilities
  • Network Vulnerabilities
• 3.4 Risk Factors
  • 3.4.1 Standardized Protocols and Technologies
  • 3.4.2 Increased Connectivity
  • 3.4.3 Insecure and Rogue Connections
  • 3.4.4 Public Information
• 3.5 Possible Incident Scenarios
• 3.6 Sources of Incidents
• 3.7 Documented Incidents

4. ICS Security Program Development and Deployment

• 4.1 Business Case for Security
  • 4.1.1 Benefits
  • 4.1.2 Potential Consequences
  • 4.1.3 Key Components of the Business Case
  • 4.1.4 Resources for Building Business Case
  • 4.1.5 Presenting the Business Case to Leadership
• 4.2 Developing a Comprehensive Security Program
  • 4.2.1 Senior Management Buy-in
  • 4.2.2 Build and Train a Cross-Functional Team
  • 4.2.3 Define Charter and Scope
  • 4.2.4 Define ICS Specific Security Policies and Procedures
  • 4.2.5 Define and Inventory ICS Systems and Network Assets

5. Network Architecture

• 5.1 Firewalls
• 5.2 Logically Separated Control Network
• 5.3 Network Segregation
  • 5.3.1 Dual-Homed Computer/Dual Network Interface Cards (NIC)
  • 5.3.2 Firewall between Corporate Network and Control Network
  • 5.3.3 Firewall and Router between Corporate Network and Control Network
  • 5.3.4 Firewall with DMZ between Corporate Network and Control Network
  • 5.3.5 Paired Firewalls between Corporate Network and Control Network
  • 5.3.6 Network Segregation Summary
• 5.4 Recommended Defense-in-Depth Architecture
• 5.5 General Firewall Policies for ICS
• 5.6 Recommended Firewall Rules for Specific Services
  • 5.6.1 Domain Name System (DNS)
  • 5.6.2 Hypertext Transfer Protocol (HTTP)
  • 5.6.3 FTP and Trivial File Transfer Protocol (TFTP)
  • 5.6.4 Telnet
  • 5.6.5 Simple Mail Transfer Protocol (SMTP)
  • 5.6.6 Simple Network Management Protocol (SNMP)
  • 5.6.7 Distributed Component Object Model (DCOM)
  • 5.6.8 SCADA and Industrial Protocols
• 5.7 Network Address Translation (NAT)
• 5.8 Specific ICS Firewall Issues
  • 5.8.1 Data Historians
  • 5.8.2 Remote Support Access
  • 5.8.3 Multicast Traffic
• 5.9 Single Points of Failure
• 5.10 Redundancy and Fault Tolerance
• 5.11 Preventing Man-in-the-Middle Attacks

---

6. ICS Security Controls

• 6.1 Management Controls
  • 6.1.1 Security Assessment and Authorization
  • 6.1.2 Planning
  • 6.1.3 Risk Assessment
  • 6.1.4 System and Services Acquisition
  • 6.1.5 Program Management
• 6.2 Operational Controls
  • 6.2.1 Personnel Security
  • 6.2.2 Physical and Environmental Protection
  • 6.2.3 Contingency Planning
  • 6.2.4 Configuration Management
  • 6.2.5 Maintenance
  • 6.2.6 System and Information Integrity
  • 6.2.7 Media Protection
  • 6.2.8 Incident Response
  • 6.2.9 Awareness and Training

People also search for Guide to Industrial Control Systems ICS Security 1st:

nist 800 82 guide to industrial control systems
guide to industrial control systems security
what is industrial control systems
industrial control systems pdf
introduction to industrial control systems