Upload File

3 rd control system cyber-security workshop a summary of this year’s meeting dr. stefan lüders...

  • Home
  • Documents
  • 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from
9
3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from E. Bonaccorsi (LHCb), P. Charrue (CERN), P. Chochula (ALICE), S. Hartman (ORNL), T. Hakulinen (CERN), T. McGuckin (JLab), T. Sugimoto (Spring8), F. Tilaro (CERN), V. Vuppala

Upload: chasity-teeling

Post on 01-Apr-2015

219 views

Category:

Documents


2 download

Report

Tags:

TRANSCRIPT

Page 1: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

3rd Control SystemCyber-Security Workshop

A Summary of this year’s meeting

Dr. Stefan Lüders (CERN Computer Security Officer)with contributions from

E. Bonaccorsi (LHCb), P. Charrue (CERN), P. Chochula (ALICE),S. Hartman (ORNL), T. Hakulinen (CERN), T. McGuckin (JLab),

T. Sugimoto (Spring8), F. Tilaro (CERN), V. Vuppala (NSCL/MSU)ICALEPCS, Grenoble (France), October 11th 2011

Page 2: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

(R)Evolution, w/o security

Page 3: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

(CS)2 in HEP ― The Objectives

Attendance: ~40 people

Scope:►All security aspects related with HEP

control systems►Control PCs, control software,

controls devices, accounts, …

Objectives:►Raise awareness►Exchange of good practices, ideas,

and implementations ►Discuss what works & what not,

pros & cons►Report on security events,

lessons learned & successes►Update on progresses

Page 4: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

September 2009

Attacks are FACT!

April 2011

Mai 2011

Summer 2011

Page 5: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

Security is a CHALLENGE…

Off-the-shelf IT security not that easy: Patching, AV, shared passwords,

network scans, …

Priorities are different: Technical requirements

+ operational needs often collide with

security.

Page 6: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

Defense-in-Depth:Network security gives

an excellent basis.

…which can be OVERCOME!

Compartmentalization of networks reduces

cross-infections.Controls devices are insecure. Test them, make them fail and

send them back to the vendor

Defense-in-Depth:Network security gives

an excellent basis.

Page 7: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

Get Started: Two Approaches

Top-Down:Going for full-blown

ISO27000 certification. Kudos!!

Bottom-Up:A thorough assessment

involving all stakeholders

Page 8: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

ONE Take-away

This is a people’s problem.(Still) need for a “Change-of-Mind”.

Establish a Security Culture!

Page 9: 3 rd Control System Cyber-Security Workshop A Summary of this year’s meeting Dr. Stefan Lüders (CERN Computer Security Officer) with contributions from

Dr. Stefan Lüders (CERN IT/CO) ― DESY ― 20. Februar 2007 “3rd CS2/HEP Workshop Summary” — Dr. Stefan Lüders — ICALEPCS2011 ― October 11th 2011

Merci beaucoup!!!

Thanks to all participants & esp. to the presenters.

Well done, guys!!!

Un merci spécial aucomité local d’organisation!


Lüders Christian-Field Observation and Etnhography

Security and Cryptography 1 Stefan Köpsell, Thorsten Strufe · Security and Cryptography 1 Stefan Köpsell, Thorsten Strufe Dresden, WS 14/15 Module 7: Keys and asymmetric encryption

Content analysis Marika Lüders /[email protected]

Lecture 11 Chosen-Ciphertext Security Stefan Dziembowski MIM UW 14.12.12ver 1.0

Qualitative interviews Marika Lüders /[email protected]

Security and Cryptography 1 Stefan Köpsell, Thorsten · PDF fileSecurity and Cryptography 1 Stefan Köpsell, Thorsten Strufe Dresden, WS 17/18 Module 4: Basic Crypto, Stream Ciphers

Tivoli Identity Manager 4.3.1 An Introduction Stefan Köhler Tivoli Security

Sensibilisation à la Sécurité Informatique Liberté académique vs. Operations vs. Sécurité CERN Computer Security Team (2010) S. Lopienski, S. Lüders, R

CSE 127 Computer Security · Stefan Savage, Spring 2020, Lecture 9 Cryptography I: Primitives based on slides by Kirill Levchenko, Stefan Savage and Alex Gantman. Midterm logistics

The Fundamental Failures of End-Point Security Stefan Frei Research Analyst Director [email protected]

Security for Distributed E-Service Composition Stefan SeltzsamStephan BörzsönyiAlfons Kemper Universität Passau

Control Systems Under Attack !? …about the Cyber-Security of modern Control Systems Dr. Stefan Lüders (CERN Computer Security Officer) Openlab Summer Student

Stefan Thorvaldsson – stefan@ywies

Agriculture and Food Security: New Challenges and · PDF fileAgriculture and Food Security 3 Agriculture and Food Security: New Challenges and Options for International Policy Stefan

4 Control System Cyber-Security Workshop · Cyber-Security Workshop . More “discipline” is what we need. Dr. Stefan L üders (CERN Computer Security Officer) with contributions

CSE 127: Computer Security Modern client-side defenses€¦ · CSE 127: Computer Security Modern client-side defenses Nadia Heninger and Deian Stefan

10/11/20061 Implementing an Information Technology Security Program EDUCAUSE 2006 Stefan Wahe Enterprise Security Consultant & Gary De Clute IT Policy

Cyber Security Awareness Academic Freedom vs. Operations vs. Security CERN Computer Security Team (2010) S. Lopienski, S. Lüders, R. Mollon, R. Wartel

Problems to Overcome Implementation Issues at CERN Dr. Stefan Lüders (CERN Computer Security Officer) (CS) 2 /HEP Workshop, Kobe (Japan) October 11th 2009

CSE 127 Computer Security · CSE 127 Computer Security Fall 2015 NetworkSecurityII Denial(of(Service((DoS)and(DNS Stefan(Savage

Dr. Stefan Lüders CERN Computer Security Officer Internet2 Fall 2011 Member Meeting, Raleigh (USA) October 3 rd -6 th 2011 CERN Workshop on Federate ID

CSE 127: Computer Security Web security model...CSE 127: Computer Security Web security model Nadia Heninger and Deian Stefan Some slides adopted from Zakir Durumeric, Dan Boneh, and

How things go wrong. The lucky one and the unlucky one Dr. Stefan Lüders (CERN Computer Security Officer) 3 rd (CS) 2 /HEP Workshop, Grenoble (France)

Appropriate Access: Levels of Assurance Stefan Wahe Office of Campus Information Security

Ein Überblick über die aktuellsten Security Features …...Oracle 12c R2 New Security Features Ein Überblick über die aktuellsten Security Features Stefan Oehrli Unser Unternehmen

Corbo-V Lüders, R.; Spiller P. The institutional foundations of economic reforms

Information Security Risk Management: In Which Security ... · Volume 28 Article 22 Information Security Risk Management: In Which Security Solutions Is It Worth Investing? Stefan

Prokofiev, V. Y., Safonov, Y. G., Lüders, V., Borovikov, A

4 th Control System Cyber-Security Workshop Exchanging ideas on HEP security Dr. Stefan Lüders (CERN Computer Security Officer) 4 th (CS) 2 /HEP Workshop,

Dr. Stefan Lüders CERN Computer Security Officer Sign into CERN: CERN IT Services for You!

CERN IT Department CH-1211 Genève 23 Switzerland t Computer Security Report Stefan Lüders GLM October 25 th, 2010

CSE 127: Computer Security Stack Buffer Overflowsdstefan/cse127-winter19/slides/lecture6.pdf · Stack Buffer Overflows Deian Stefan Adopted from Kirill Levchenko, Stefan Savage, and

Stefan Tanase Senior Security Researcher Global Research & … · 2017. 3. 22. · Stefan Tanase, Senior Security Researcher, Kaspersky Lab Riga, Latvia –16 October 2014. Title:

CSE 127 Computer Security · CSE 127 Computer Security Stefan Savage, Spring 2020, Lecture 11 Web Security I

Writing a Composition A presentation by the Purdue University Writing Lab (Adapted by Jochen Lüders)