Cybersecurity txhua teev ntawm ib hnub, txhua hnub ntawm lub xyoo - tsis muaj hnub so.
txais
Nws yuav tsis muaj kev cuam tshuam ntawm Super Bowl kev ua si, tab sis qhov kev pabcuam tshiab los ntawm 1898 & Co., sab caj npab sab laj ntawm Hlawv & McDonnell, lub tuam txhab engineering, kev tsim kho thiab kev tsim vaj tsev, tau teeb tsa kom txav cybersecurity resiliency pob mus rau hauv qhov chaw.
Raws li cov rubric "Tshem Tawm Kev Tiv Thaiv & Teb" lub tuam txhab tab tom muab "kev hem thawj kev hem thawj thiab kev muaj peev xwm teb" - ib lub khw muag khoom - rau cov tuam txhab tsim vaj tsev tseem ceeb, los ntawm hluav taws xob mus rau dej, rau cov roj refineries thiab rigs, mus rau cov kav dej. Lub peev xwm tshiab yog ib qho ntxiv rau nws cov Kev Pabcuam Tswj Xyuas Kev Ruaj Ntseg (MSS) uas twb muaj lawm.
1898 & Co. cov neeg siv khoom yuav tau txais ib puag ncig-lub-teev thiab txhua hnub ntawm lub xyoo saib xyuas ntawm txhua qhov ua tau yooj yim ntawm lawv lub tshuab, nrog rau kev tsom mus rau qhov nyuaj-rau-nrhiav intrusion ntawm lawv cov kev khiav hauj lwm thev naus laus zis (OT) rau lawv cov kev tswj kev lag luam. (ICS) uas yog ib feem tseem ceeb ntawm kev tsim kho vaj tse thiab xav tau kev saib xyuas tshwj xeeb.
IT Thiab OT 'Kev Txuas Ntxiv'
Gabriel Sanchez, tus thawj coj ntawm Security Operations Center (SOC) kev ua haujlwm thiab qhov xwm txheej teb, hais rau kuv tias xyoo dhau los, IT thiab OT tau dhau los ua kev sib raug zoo, ua rau muaj qhov tsis zoo ntawm kev ua haujlwm raws li cov neeg tawm tsam IT pom tias lawv tuaj yeem cuam tshuam cov kab ke hauv kev sib tw thiab nyuaj rau ntes txoj kev.
cov Qhov tsis zoo ntawm OT thiab ICS yog tias lawv feem ntau tuaj yeem ua rau tsis ua haujlwm yam tsis muaj kev tshawb pom tam sim.. Cov phau ntawv piv txwv ntawm qhov no yog Stuxnet, US cyberattack ntawm uranium enrichment centrifuges hauv Iran. Qhov kev tawm tsam ntawd ua rau Iranian engineers flummoxed thaum lawv pom lawv cov centrifuges tig unaccountably tawm ntawm kev tswj.
Sanchez muab, piv txwv li, hluav taws xob substation. Txhawm rau ua phem rau nws, koj ib zaug yuav tsum tau nkag mus rau hauv lub cev, nws hais. Tam sim no nws tuaj yeem ua tiav los ntawm tus kws tshaj lij IT nrog kev ua phem thiab kev txawj ntse.
Cov lus teb rau IT hem thiab OT hem tuaj yeem sib txawv thiab. Raws li Mark Mattei, tus thawj coj ntawm kev lag luam cybersecurity rau MSS, tau piav qhia, nrog kev tawm tsam hauv computer, IT nres, koj xav nres tam sim ntawd. Tab sis nrog OT, qhov ntawd yuav tsis yog qhov zoo tshaj plaws uas koj tuaj yeem ua tau.
Xav txog: Yog tias qhov kev tawm tsam yog nyob rau hauv ib feem ntawm cov nroj tsuag lossis ib qho system, koj tsis xav kaw tag nrho cov nroj tsuag lossis cov kab ke. Yog hais tias lub substation yuav tsum muaj OT intrusion, koj yuav tsis xav kaw tag nrho cov kab sib chaws. Yog hais tias ib lub twj tso kua mis ntawm lub refinery tau ntsib ICS intrusion, koj yuav tsis xav kaw tag nrho cov nroj tsuag.
Mitigating Kev puas tsuaj rau OT
Matt Morris, tus thawj coj ntawm kev ruaj ntseg thiab kev tawm tswv yim txog kev pheej hmoo, hais tias 1898 & Co. teb rau OT thiab ICS intrusion yog, "Peb tuaj yeem ua dab tsi los txo kev puas tsuaj?"
Nees nkaum plaub-teev saib xyuas thiab cov lus teb tam sim no yog cov yuam sij rau lub tuam txhab cov kev pabcuam tshiab. 1898 & Co tau sab laj rau ntau xyoo ntawm kev ruaj ntseg cybersecurity, thiab Burns & McDonnell muaj qhov tshwj xeeb ntawm kev nkag siab ntawm nws, tau tsim ntau yam kev tsim kho tseem ceeb. 1898 & Co. yog ua hauj lwm nyob rau hauv ib puag ncig nws paub thiab muaj "playbooks" tsim nyob rau hauv lub sij hawm rau kev txheeb xyuas cov kev hem thawj thiab cov txheej txheem rau mitigation.
Rau cov khoom siv hluav taws xob, refineries thiab cov tshuab hauv nroog, xws li cov dej phwj tuaj thiab dej, nrog rau qee qhov tseem ceeb hauv cheeb tsam ua haujlwm rau pob tshiab cybersecurity, suav nrog OT thiab ICS, muaj kev thaj yeeb nyab xeeb nrog rau kev txuag nyiaj txiag.
Mattei piav qhia, "Peb muaj cov qauv ua raws hnub ci, 24/7, 365 hnub hauv ib xyoos, suav nrog hnub so." Nws hais tias rau lub tuam txhab los txhim kho qhov sib npaug ntawm kev saib xyuas lub peev xwm, tsuas yog kev saib xyuas kev ua haujlwm yuav xav tau kev siv nyiaj txog $ 12 lab ib xyoos thiab nce. Kev ua haujlwm rau nws - nrhiav cov txuj ci - yuav nyuaj, nws hais ntxiv.
Lub tuam txhab tab tom tsim SOC hauv Houston, pib nrog kev pib ua tiav ntawm ntau dua 60 tus kws tshaj lij. Lawv xaiv Houston vim nws yog lub hauv paus rau ntau qhov tseem ceeb ntawm cov txheej txheem, thiab vim tias lub pas dej muaj peev xwm loj.
Chris Underwood, tus lwm thawj coj thiab tus thawj tswj hwm, tau hais tias, "Kev tswj hwm kev nyab xeeb rau ICS thiab OT rau kev nyab xeeb yog qhov tsis tshua muaj peev xwm rau ib qho laj thawj: Cov txheej txheem tseem ceeb yog ib puag ncig nyuaj.
"Peb cov kws pab tswv yim nyob thiab ua pa tseem ceeb hauv kev tsim kho. Peb tau ua haujlwm hauv kev lag luam thiab kev lag luam, yog li peb muaj kev nkag siab tob txog nws cov kev cov nyom. "
Tau qhov twg los: https://www.forbes.com/sites/llewellynking/2023/02/15/burns-mcdonnall-arm-launches-unique-cybersecurity-service-for-critical-infrastucture/