specialized technology

bring your own device(BYOD)

security policy set by a company that allows employees to use personal smartphones, laptops, and tablets for work and connection to the corporate network

android

linux based operating system made by google

• largest market share

mobile device management(MDM)

the process and supporting technologies for tracking, controlling, and securing the organization’s mobile infrastructure

enterprise mobility management(EMM)

a mobile device management suite with broader capabilities, such as identity and application management

Internet of Things(IoT)

a group of objects connected to the wider Internet by using embedded electronic components

embedded system

a computer system that is designed to perform a specific and dedicated function

• embedded systems are considered static environments where frequent changes are not made or allowed

programmable logic controller(PLC)

a type of computer designed for deployment in an industrial or outdoor setting that can automate and monitor mechanical systems

• PLC firmware can be patched and reporgrammed to fix vulnerabilties

system-on-chip(SoC)

a processor that integrates the platform functionality of multiple logical controllers onto a single chip

real-time operating system(RTOS)

a type of OS that prioritizes deterministic execution of operations to ensure consistent response for time-critical tasks

• often used in embedded systems

• embedded systems typically cannot tolerate reboots or crashes and must have response times that are predictable to within millisecond tolerances

field programmable gate array(FPGA)

a processor that can be programmed to perform a specific function by a customer rather than at the time of manufacture

• end customer can configure the programming logic to run a specific application instead of using an ASIC(application-specific integrated circuit)

operational technology(OT)

a communications network designed to implement an industrial control system rather than data networking

industrial control system(ICS)

a network that manages embedded devices

• industrial control systems will prioritize availability and integrity over confidentiality

• ICS manages the process automation by linking together PLCs using a fieldbus to make changes in the physical world

fieldbus

digital serial data communications used in operational technology networks to link PLCs

human-machine interface(HMI)

input and output controls on a PLC to allow a user to configure and monitor the system

data historian

software that aggregates andc atalogs data from multiple sources with an industrial control system

supervisory control and data acquisition (SCADA)

a type of industrial control system that manages large scale, multi-site devices and equipment spread over a geographic region

• SCADA typically runs as software on ordinary computers to gather data from and manage plant devices and equipment with embedded PLCs

modbus

a communications protocol used in operational technology networks

• gives control servers and SCADA hosts the ability to query and change the configuration of each PLC

four key controls for mitigating vulnerabilities in specialized systems

1. establish administrative control over operational technology networks by recruiting stagg with relevant expertise

2. implement the minimum networks links by disabling unnecessary links, services, and protocols

3. develop and test a patch management program for operational technology networks

4. perform regular audits of logical and physical access to systems to detect possible

warning: enumeration tools and vulnerability scanners can cause problems on Operational Technology networks

premise systems

systems used for building automation and physical access security

• many system designs allow the monitoring to be accessible from the corporate data network or even directly from the Internet

building automation systems(BAS)

have components and protocols that facilitate the centralized configuration and monitoring of mechanical and electrical systems within offices and data centers

physical access control system(PACS)

components and protocols that facilitate the centralized configuration and monitoring of security mechanisms within offices and data centers

controller area network(CAN)

a digital serial data communications network used within vehicles

• the primary external interface is the onboard diagnotics (OBD-ll) module

• there’s no concept of source addressing or message authentication in a CAN bus