Top Banner
Why (Control System) Cyber-Security sucks… Dr. [email protected] ShareIT, October 5 th 2018, Valmiera (LV) DIY.DESPAIR.COM
37

Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. [email protected] ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

May 22, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)

DIY

.DE

SP

AIR

.CO

M

Page 2: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)“Control System” in a Nutshell

Industrial Control System (ICS) Safety System

Page 3: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)“Cyber-Security” in a Nutshell

Page 4: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Overview

Page 5: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)
Page 6: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Mankind’s Curiosity…

"CM

B T

imelin

e300 n

o W

MA

P"

by N

AS

A/W

MA

P S

cie

nce T

eam

-O

rigin

al v

ers

ion: N

AS

A;

modifie

d b

y R

yan K

ald

ari

. Lic

ensed u

nder

Public D

om

ain

Page 7: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Mankind. Literally.

Page 8: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Creating Big Bang Conditions

Page 9: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Controlling a JediTM Lightsaber

Page 10: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)The Large Hadron Collider (LHC)

Page 11: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)The ATLAS “camera” (open)

Page 12: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)3D “Photo” of a LHC Collision

Page 13: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Return on Investment

François Englert Peter W. Higgs

Page 14: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)More than the LHC…

Page 15: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)AMS: A Detector in Space

Page 16: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Overview

Page 17: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)(R)Evolution of Control Systems

Page 18: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)(R)Evolution of Control Systems

Page 19: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)CERN: 100+ of (commercial) ICSes

Experiments:ALICE, ATLAS,

CMS, LHCb,

LHCf, Moedal,

TOTEM

Alfa, AMS,

Asacusa, Atrap,

Cast, Collaps,

Compass, Dirac,

GIF, ISOLTRAP,

MICE, Miniball,

Mistral, NA49,

NA60, NA62,

nTOF, Witch, …

GCS, MCS,

MSS, Cryo

Accelerator Infrastructure:ACS, ADT, APWL, BCTDC, BCTF, BDI,

BQE, BQS, BQK, BPAWT, BIC, BLM,

BOF, BPL, BPM, BOB, BRA, BSRT, BTV,

BWS, Cryo, CWAT, FGC, LEIR LLRF, LHC

Beam Control, LBDS, LHC Logging

Service, LTI, MKQA, OASIS, PIC,

QDS/QPS, SPS BT, Vacuum, WIC

Accelerators:AD, AWAKE, CLIC3,

Elena, FCC, ILC,

ISOLDE, LEIR, LHC,

Linac 2/3/4, PS, PS

Booster, SPS

Safety: ACIS, AC PS1, AC PS2, AC SPS1, AC SPS2, ADS, Alarm

Repeater, ARCON, CCTV, CESAR, CSA, CSAM, DSS, LACS, LASER,

LASS, MSAT, RAMSES, Radio Protection Service, SFDIN, SGGAZ, Sniffer,

SUSI, TIM

Infrastructure: CV, DBR, ENS, FM, Gamma Spectroscopy, Moni, Moon,

Spectrum, TS/CSE, YAMS

Page 20: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)CERN: Examples of ICS Devices

Page 21: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)ICS (aka IoT) @Home. Fail?

Solar Power Converter

Sony HiFi

WiiU

Surround System

Apple TV

Sony TV

Page 22: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)ICS/IoT@World. Fail!

Page 23: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)And also CERN is target…

Page 24: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Overview

Page 25: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)The Internet of Stupid Things

Page 26: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Evolution vs. Security

Page 27: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Wireless to the Plant Floor :-(

Page 28: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Network Segregation

Page 29: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Computer Centre Segregation

Page 30: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Development vs. Operations

Page 31: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Controls in the Cloud

Page 32: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)AuthN & AuthZ

Page 33: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Train Security at Plant Floor

Page 34: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)

Page 35: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)The Problem 2.0 & CERNs Approach

Page 36: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)

Why (Control System) Cyber-Security sucks…

Dr. [email protected]

ShareIT, October 5th 2018, Valmiera (LV)Thank you… Questions?

Page 37: Why (Control System) Cyber- ShareIT, October 5 …...Why (Control System) Cyber-Security sucks… Dr. Stefan.Lueders@cern.ch ShareIT, October 5 th 2018, Valmiera (LV) ICS (aka IoT)