Industrial Network Security

Chapter 7. Establishing Secure Enclaves

Information in this Chapter:

• Identifying Functional Groups

• Establishing Enclaves

• Securing Enclave Perimeters

• Securing Enclave Interiors

The concepts of Defense in Depth, as discussed up to this point, have focused on the separation of devices, ports, services, and even users into functional groups. The logic is simple: by isolating functional groups, the attack surface of any one group is minimized. The group itself can be secured using a variety of products and techniques, turning the group into a secure enclave. The enclave will be much more difficult to penetrate because the isolation of its services will deter attempts to scan and enumerate the enclosed network devices.

Unfortunately, enclaves are ...