Industrial Security Concepts – IEC 62443
With the increasing connectivity of production plants (IIoT), new threats arise that need to be included in traditional risk management processes. As a plant operator, machine or control manufacturer, you should also be aware of these risks. The IEC 62443 international standard series addresses the cyber security of Industrial Automation and Control Systems (IACS), following a holistic approach that covers the entire life cycle.
Cyber Security & IT/OT Integrity: Do I actually need that?
Example based on the TRITON malware framework: Triton, which was first discovered in 2017 in a Saudi Arabian chemical plant, is one of the best-known representatives of industrial plant-specific malware. In this case, the plant’s security system is targeted in order to take over and control it remotely. The software had been slumbering in the system for several years before it caused the plant to fail twice in 2017. However, the attackers could also have triggered the release of dangerous gases or explosions, which would have endangered not only economic resources but also human lives.