Название: Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems, Third Edition
Автор: Eric D. Knapp
Издательство: Syngress/Elsevier
Год: 2024
Страниц: 518
Язык: английский
Формат: epub (true)
Размер: 48.6 MB

As the sophistication of cyber-attacks increases, understanding how to defend critical infrastructure systems—energy production, water, gas, and other vital systems—becomes more important, and heavily mandated. Industrial Network Security, Third Edition arms you with the knowledge you need to understand the vulnerabilities of these distributed supervisory and control systems.

Authors Eric Knapp and Joel Langill examine the unique protocols and applications that are the foundation of Industrial Control Systems (ICS), and provide clear guidelines for their protection. This comprehensive reference gives you thorough understanding of the challenges facing critical infrastructures, new guidelines and security measures for infrastructure protection, knowledge of new and evolving security tools, and pointers on SCADA protocols and security implementation.

Formal education is offered by many universities as well as organizations such as the Cybersecurity and Infrastructure Security Agency (CISA), the International Information System Security Certification Consortium (ISC2), the SANS Technology Institute, and others. At the same time, for many readers coming from backgrounds in both industrial control (“OT”) and information technology (“IT”), the idea of industrial cyber security will be entirely new.
One thing that has definitely changed: it is no longer optional to ignore the subject of securing industrial automation and process control environments from the ever rising threat of a cyberattack.

Since the first edition, this book has attempted to define an approach to industrial network security that considers the unique network, protocol, and application characteristics of an industrial control system (ICS) while also taking into consideration a variety of common compliance controls. For the purposes of this book, a common definition of ICS will be used in lieu of the more specific supervisory control and data acquisition (SCADA) or distributed control system (DCS) terms. Note that these and many other specialized terms are used extensively throughout the book. While we have made an effort to define them all, an extensive glossary has also been included to provide a quick reference if needed. If a term is included in the glossary, it will be printed in bold type the first time that it is used. One term that is new is the aforementioned “OT,” or “operational technology.” The acronym “OT” is widely used today to discuss any and all aspects of industrial cyber security.

All-new real-world examples of attacks against control systems such as Trisys, Pipedream, and more diagrams of systems
Includes all-new chapters on USB security and OT Cyber Kill Chains, including the lifecycle of an incident response from detection to recovery
Expanded coverage of network anomaly detection and Beachhead systems for extensive monitoring and detection
New coverage of network spans, mirrors, and taps, as well as asset discovery, log collection, and industrial-focused SIEM solution

Book audience:
To adequately discuss industrial network security, the basics of two very different underlying communication systems need to be understood: the Ethernet and Internet Protocol (IP) networking communications used ubiquitously in the enterprise, and the control and field bus protocols are used to manage and/or operate automation systems.