Practical Industrial Cybersecurity

Chapter 4ICS Module and Element Hardening

OBJECTIVES

Upon completion of this chapter, you should be able to:

1. Knowledge of endpoint protection:
   • User workstations
   • Mobile devices
2. Knowledge of OS security:
   • Unix/Linux
   • Microsoft Windows
   • Least Privilege security
   • Virtualization
3. Knowledge of application security:
   • Application security
   • Database security
4. Knowledge of anti-malware:
   • Implementation
   • Updating
   • Monitoring
   • Sanitization
5. Knowledge of embedded device security:
   • PLCs
   • Controllers
   • RTU
   • Analyzers
   • Meters
   • Aggregators
   • Security issues
   • Default configurations
6. Knowledge of network security/hardening:
   • Server security
   • Switch port security

Introduction

In computer and networking environments, the term hardening refers to the process of making a component or system more secure. As you can see from the test objectives listed, this occurs in several different areas of the OT/IT network and at several different levels. In this chapter, we will explore tools and techniques associated with hardening various areas of the ICS.

• Endpoints
• Operating systems
• Applications
• Embedded ICS devices
• Networks
• Servers
• Network connectivity devices

Endpoint Security and Hardening

An endpoint is defined as a user computing device connected to a TCP/IP network that enables the user to access information across the network. This designation typically includes desktop and notebook computers, in addition to mobile computing devices such as tablets and smart phones.

User Workstation Hardening ...