Кибербезопасность промышленного Интернета вещей

  • View
    4.006

  • Download
    11

Embed Size (px)

Transcript

  • 29 2016-

    Industrial IoT:

  • Agile?

  • DDoS- 665 / 143 Mpps ( ) IoT- IP-,

    , DVR (digital video recorder) - OVH DDoS-

    1 / 93 Mpps 150 IoT- IoT- IP- DVR

    (digital video recorder)

    20 ?

  • 20 ?

  • ?

  • 800 -

    , ?

    ?

  • ?

  • What about a Stuxnet-style exploit?

    2009!

  • Industrial IoT?

    2015 Cisco and/or its affiliates. All rights reserved. 12

  • Framework for LNG deal with Russia

    LNG deal with Uzbekistan

    LNG deal with Australia

    LNG deal with Australia

    LNG deal with France

    Finalization of South Pars Phase 11 with Iran

    LNG deal with QatarGas

    LNG deal with QatarGas

    LNG deal with QatarGas

    LNG deal with Shell

    LNG deal with Exxon

    Shale gas deal with Chesapeake Energy in Texas

    Aggressive bidding on multiple Iraqi oil fields at auction

    Purchase of major stake in a second Kazakh oil company

    China-Taiwan trade deal for petrochemicals

    Purchase of Rumaila oil field, Iraq, at auction

    McKay River and Dover oil sands deal with Athabasca, Canada

    Development of Irans Masjed Soleyman oil field

    Oil development deal with Afghanistan

    Purchase of major stake in Kazakh oil company

    2012201120102009 20132008

    ShadyRAT(U.S.

    naturalgaswholesaler

    )

    NightDragon

    (Kazakhstan,Taiwan,Greece,U.S.)

  • Facebook

    Facebook

    SAM &

    , shutdown

    ( ,

    !)

    3+

  • ICS-CERT 2015 295 ( 20%) 486

  • 2015- ( )

    Ivanpah Solar Electric System ( ?)

    (?)

  • DDoS- -

    Dust Storm ,

    , .. PLC Siemens,

  • - Lansing Board of Water & Light CMS

    ( )

    Kemuri Water Company /

    () /

  • ?

  • Network Automation

    Service Assurance

    Connected Machines

    Edge Analytics Fabric

    Location Services

    Factory Wireless

    Design Collaboration

    Private and Hybrid Cloud

    Ecosystem Security

    Secure Remote Access

    Network Architectures

    Network Analytics

    Network Security

    Virtualize Everything

    Public, Private & Hybrid Cloud

    Cloud Analytics Platforms

    Factory Network

    Factory Security

    Machine as a Service

    Virtualization & Compute

    Factory Collaboration

    Asset Management

    Supply Chain Collaboration (SXP)

  • :

  • Smart Grid

    Connected Factories

    Mobile Devices Connected

    Wind Turbines

    Smart Street Lights

    Connected Trucks

    Connected Oil Platforms

    Connected Traffic Signals

    Connected Machines

    /

    Connected Equipment

    Connected Rail

    Smart Buses

  • /

  • FDA GSMA IoT

    ENISA Smart Grid, CIIP BSI OPC UA

    ,

  • NIST CybersecurityFramework

  • Cybersecurity Framework

    2014

    DCS PLC RTU IED SCADA Safety Instrumented Systems

    (SIS)

    ,

  • CSF

  • NIST 800-82 800-53 ISA/IEC-62443 ISO 27001/02 ENISA API ICS-CERT COBIT Council on CyberSecurity (CCS)

    Top 20 Critical Security Controls (CSC)

  • 31 31 14.03.2014

    , , ,

    , 2007- ,

  • ( ), ( , ), , , ( , , )

    , , , , , () () ()

  • + + + + + + + + + , () + + + + + + + + + () + + + () + + + + + + + + + + + + + + + , , + + +

  • + + + + + + + () + + +

    2-

  • ?

    , -

    ,

  • , ?

  • Kaspersky Industrial CyberSecurity Positive Industrial Security Incident Manager

    Infowatch ASAP, DATAPK, InfoDiode, Symantron, ViPNet, Secure Diode,

  • 20+

    10+ ( ) 5+

    ( )

  • Chatham House -

    Nuclear Threat Initiative (NTI)

    US NRC SOC UK

  • security-request@cisco.com

    :

    ?

    http://www.facebook.com/CiscoRu

    http://twitter.com/CiscoRussiahttp://www.youtube.com/CiscoRussiaMedia

    http://www.flickr.com/photos/CiscoRussia

    http://vkontakte.ru/Cisco

    http://blogs.cisco.ru/

    http://habrahabr.ru/company/cisco

    http://linkedin.com/groups/Cisco-Russia-3798428

    http://slideshare.net/CiscoRu

    https://plus.google.com/106603907471961036146/postshttp://www.cisco.ru/

  • !