Practical Industrial Cybersecurity

Chapter 5Cybersecurity Essentials for ICS

OBJECTIVES

Upon completion of this chapter, you should be able to:

1. Knowledge of Security Tenets:
   • CIA
   • Nonrepudiation
   • Least privilege
   • Separation of duties
2. Knowledge of Availability:
   • Health and safety
   • Environmental
   • Productivity
3. Knowledge of Threats:
   • Nation-states
   • General criminals
   • Inside and outside malicious attackers
   • Hacktivists
   • Inside nonmalicious attackers
4. Knowledge of Attacks and Incidents:
   • Man-in-the-middle
   • Spoofing
   • Social engineering
   • Denial of service
   • Denial of view
   • Data manipulating
   • Session hijacking
   • Foreign software
   • Unauthorized access
5. Knowledge of Cryptographics:
   • Encryption
   • Digital signatures
   • Certificate management
   • PKI
   • Public versus private key
   • Hashing
   • Key management
   • Resource constraints

Introduction

In 1982, a 15-year-old high school student named Rich Skrenta wrote the first known computer virus. Originally a joke, the virus was loaded on to a floppy disk and inserted into a friend's Apple II computer. It was attached to a game and designed to launch the 50th time the game was started. It then changed to a blank screen that displayed a poem. This was just the beginning. From there, the virus was placed into the computer's memory, which would then be copied over to uninfected floppy disks whenever they were inserted.

From this seemingly innocent start, the computer virus was born. A slightly malicious intent was all that was needed. Although the virus wasn't designed to cause damage, the desire to prank ...