Application security testing
So how do you discover if any of these vulnerabilities are present in the applications deployed on your ICS network? The answer is by testing all of the installed applications for vulnerabilities. And I emphasize all of the installed applications because you first need to know all of the applications that are running on the ICS network. This is where asset management procedures will help. We discussed this in a previous chapter. You cannot secure what you don't know you have. Maintaining an up-to-date asset list with information that includes software versions, patching levels and firmware revisions should be your highest priority.
With an accurate asset list you can compare the revision and patch levels of each ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access