Upload File

nil - siemens d.o.o. beograd · © 2017 nil, security tag: public 1 nil.com © 2017 nil, security...

  • Home
  • Documents
  • nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC
16
© 2017 NIL, Security Tag: PUBLIC nil.com © 2017 NIL, Security Tag: PUBLIC

Upload: others

Post on 28-May-2020

3 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 1

nil.com © 2017 NIL, Security Tag: PUBLIC

Page 2: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 2

Robert Turnšek

CYBER SECURITY IN THE DIGITAL AGE

Page 3: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 3

“THERE ARE TWO KINDS OF BIG COMPANIES, THOSE WHO’VE BEEN

HACKED, AND THOSE WHO DON’T KNOW THEY’VE BEEN HACKED.”

James Comey

Median number of days attackers are present on a victims network

before detection

200+ Days after detection

to full recovery

80 Impact of lost

productivity and growth

$3TRILLION

Average cost of a data breach (15% YoY

increase)

$3.5MILLION

Page 4: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 4

STUXNET DEPLOYED

STUXNET DETECTED

BLACKENERGY LAUNCHED

HAVEX LAUNCHED

HAVEX DETECTED*

BLACKENERGY DETECTED

2008

2009

2010

2011

2012

2013

2014

2015

Cyber threats to ICS networks are increasing

Page 5: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 5

More damaging than ever

Destroyed uranium centrifuges

Manipulated steel mill equipment

Ruptured oil pipeline

Range of cost to company: $1.9M - $65M

Page 6: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 6

Digital Transformation on a Massive Scale

Attack Sophistication

Threat Actors

Attack Surface

Global Cybercrime Market: $450B to $1T

15B

500B

$19T Opportunity

Next 10 Years

Devices In 2030

Devices Today

Page 7: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 7

Threat-Centric Security Model

Attack Continuum

Before Discover Enforce Harden

During Detect Block

Defend

After Scope

Contain Remediate

Network Endpoint Mobile Virtual Cloud

Point-in-time Continuous

Page 8: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 8

Security Challenges

• Detect, understand, and block

• Manual process

• Short on resources

• Long provisioning times

• Costly

• Complex validation process

Evolving Threats ► Security Operations ► Compliance ►

►

►

►

►

►

►

Page 9: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 9

Attackers

of data is stolen in hours; detection can take weeks or months

60%

of data center breaches can be tied to misconfigured security solutions

95%

of companies connect to domains that host malicious files or services

100%

Well-funded. They are part of massive operations

Inventive. They rapidly change their tactics and

tools, finding new vulnerabilities to exploit

Insidious. They blend in with the targeted

organization, sometimes taking weeks or months to establish multiple footholds in infrastructure and user databases

Today’s hackers are more advanced than ever

Sources: Verizon 2014 Data Breach Investigations Report (DBIR); Gartner; Cisco Annual Security Report 2015

Page 10: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 10

Unique Needs & Differing Security Perspectives

IT OT

Information Security Triad

• Confidentiality • Integrity • Availability

• Availability • Integrity • Confidentiality

Access Control • Strict Identity Mgmt, Network

Authentication, & Access Policies • Data & Application privileges

• Strict Physical Access • Simple Network Device Access • Insecure inside systems (SCADA)

Threat Detection & Mitigation

• Shut Down Access to Detected Threat

• Isolate Threat but Keep Operating

Upgrades • Automatically Pushed During Uptime • Scheduled During Downtime

Implications of a Device Failure

• Work-around or Wait • Production is Down • ($$’s/hour …or worse)

Product Lifecycles • 3 years or less • 10-15 years

Page 11: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 11

Attack Kill Chain

Page 12: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 12

IT/OT Converged Security Model

Control & Safety Level 1

Device Level 0

Control Center Level 3

Legacy RTU

Process Control & Safety Networks Multiservice Networks

Wireless Sensor

Sensor Motor Valve Drive Pump Breaker Power

Monitor Starter

Historian HMI

Power Room

Safety

Process

Power

Process

CCTV

Access Control

Voice

Mobile Worker

Controller Controller Controller

Serial/Hardwired

Process Ethernet Multiservice Ethernet

WAN

Wireless

Fleet

RFID

SIEM

Actuator

Safety Systems

Printer

Instrumentation

SIEM

SCADA System Head-end

Operator & Engineer Workstations

Process Automation System Server

SIEM

SIEM

Process Historian / Distributed Historian

Application Servers

Operational Business Systems

SIEM

SIEM

SIEM

Safety & Security

Manufacturing Execution System (MES)

SIEM

SIEM

Distributed Control System (DCS)

SIEM

SIEM

PCN Domain Controller

Enterprise Levels 4-5

DMZ Level 3.5

Operational Telecoms - LAN/Field

Internet

Supervisory Level 2

DMZ Domain Controller

SIEM

Site

Identity Services

SIEM

Centralized Log Collection

SIEM

Compliance SIEM

Center

Remote Engineering via Secure TPA

SIEM

Historian

SIEM

Vendor Qualified Anti-Virus

Vendor Qualified Patching

SIEM

SIEM

Terminal Services

SIEM

Asset Inventory

SIEM

Core Networks

Page 13: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 13

Example - Initial state

Win 10 Win 7 Win XP

Active directory File server

SCADA PLC Sensor

Win 7

access

data

login

IT OT

Page 14: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 14

Example - After IT/OT separation

Win 10 Win 7 Win XP

Active directory File server

SCADA PLC Sensor Firewall

IT OT

Page 15: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 15

Example - Additional OT services

Page 16: nil - Siemens d.o.o. Beograd · © 2017 NIL, Security Tag: PUBLIC 1 nil.com © 2017 NIL, Security Tag: PUBLIC

© 2017 NIL, Security Tag: PUBLIC 16 nil.com

ENABLING IT FOR BUSINESS


Rajiv Pratap Rudy - ||The Chief Electoral Officer of Bihar|| Sabha Elections 2010/Rajiv... · Atisha Prata Rud NIL NIL 100,000.00 NIL NIL NIL Description Cash Deposits in Banks, Financial

LPMA Madeira - ivao.ptivao.pt/book/public/files/LPMA.pdf · Airport • NIL Navaids • NIL Runway • NIL SID • NIL STAR • NIL Procedures • NIL Minima • NIL Others • NIL

REPORT ON CORPORATE GOVERNANCE FORMING ...A NNUAL EPORT 201819 71 Shri Sanjiv Singh Nil 5 Nil Nil 4000 Shri B. C. Tripathi Nil 4 Nil Nil Nil Dr. T. Natarajan 6 3 4 Nil Nil Dr. Jyoti

Scanned by CamScanner - Nagaon ISLAM.pdf · b) UBI, Haibargaon Branch A/C No- 2062010044679 Rs.1000/- Nil Nil Nil Spouse 40,000 Nil Nil Nil Nil Dependen Nil SBI, Khutik atia Branch

of Contract/Arti.pdf · Nil Nil Nil Nil Nil Nil Nil Compliance Compliance Compliance Better Compliance ... or Airway Bill (Tenderers may quote the earliest delivery period)

Chapter 111© copyright Janson Industries 2011 Custom Tags ▮ Tag Handlers ▮ XML ▮ Tag Libraries ▮ Web Deployment Descriptor

Urdu Crores Nil 13.00 La kh Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil DE Nil Nil Nil Nil ENT Qualification: VERIFICATION:- I, the deponent, above named, do hereby

Primary ( STC CODE ) - JK Cement plant’s kiln. NIL NIL NIL (b) From Pollution Control Facilities Nil Nil Nil PART –E ... No discharge of rain water or waste water from the mine

~ SAKTHI FINANCE · 11 Sakthi Financial Services (Cochin) P Ltd 1861336 6.18 Nil Nil Nil Nil Nil Nil Nil 6.18 12 Sakthifinance Financial Services Ltd 3391775 11.27 3391775 100.00

Scanned by CamScanner · NIL NIL NIL cast in against resolution of NIL NIL NIL whose votes E-V0tin Ballot TOTAL (iii) Invalid votes: Type Votin E-Votin Ballot of Total number of members

metnet.imd.gov.inmetnet.imd.gov.in/progressreports/1799112015-04Progress...NO. OF BULLETIN ISSUED 08 08 08 08 08 MC Srinagar Nil Nil Nil Nil Nil Nil Nil MC Chandigarh Nil Nil 01 03

Sir Visvesvaraya Institute Of Technology, Nashiksvitnashik.in/NAAC/Criteria_5/5.4.1_Audited_Statement_of_Association.pdfPlace: Nashik Date:- Nil Nil Nil Nil Nil Nil Nil Nil Nil 120823

DEPT: ENERGY HOD: NREDCAP · 1 Sri Y. Yella Reddy, DGM (F&A) 1 .. CPIO HO NIL 07 07 05 02 04 2 13 PIOs for 13 Districts headed by District Managers Nil Nil Nil Nil Nil Nil 3 Total

AUGUST 2020 SUBORDINATE COURTS - hcmadras.tn.nic.in COURTS.… · [email protected] om 26.08.2020 20.08.2020 3 Prl. District Court, CBE. Coimbatore NIL NIL NIL NIL NIL NIL NIL I

sindh.gov.pk · Web viewAkbar Ali Lala PresidentMuhammad khan G.Secretary Nil Nil Nil Nil Nil membership Fee Nil Not paid not audited unactive 54 Al Ithad welfare Association village

Stmt of immovable Property123 - mineralresources.mp.gov.in of...11 Shri Govind Pal, Mining Inspector 29600 07/01/2018 2017 Nil Nil Nil Nil Nil Nil Nil 12 Shri Sandeep Rawal, S.T.A

THE AEROSPACE CORPORATION...039 nil nil 085 nil nil 086 nil nil 114 nil nil 207 59 50 Table I lists all McMath plage regions observed at 3. 3 -mm wave-length from 1 July 1972 - 15

nil.com © 201 1 · © 2019 NIL, Security Tag: PROTECTED 18 SD-Access Fabric: Overlay Benefit Stretched Subnets allow an IP subnet to be “stretched” via the Overlay • Fabric

103.23.150.75103.23.150.75/Affpdf/48ManeArvind.pdf · Swapnil Arvind Mane Nil Nil Nil Nil Nil Nil Nil Depen dent -3 Etc Name Sourabh Arvind Mane Nil Nil Nil Nil Nil Nil Nil Description

Multifarious Website for Indian Railway Engineersirtsa.net/...Railway-Officers-Rest...Centers-Halls.pdf · AC room Non AC AC Room Non AC AC Room Non AC Nil Nil Nil Room Nil Nil Nil

No Email Address...Comments Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return

TAG COMMANDER - youbuyfrance.com · © tag commander ting ail s gaming te outlet g vel ail ail ail automotive ail

9 Atmiya University Nil Nil Nil Nil Workshops

Bang · 1,016.75 1063 0.25 Nil 170.55 Nil Nil 515.2 2,961.83 (Rs. in Lakh) Up to year ended 31/03/2010 1,016.75 1063 0.25 Nil 152.33 Nil Nil 162.43 515.2 2,909.96 The unutilised portion

INFORMATION CIRCULAR - ArcWest Exploration Inc....Nil Nil Nil Nil Nil Nil Nil Donald Lay Former Director 2018 2017 13,560 Nil Nil 15,000 Nil Nil Nil Nil 13,560 (5) 15,000 (5) Brien

ceoassam.nic.inceoassam.nic.in/election/AE2016/AbstractStatement/19/BidyaSingEngleng.pdf3199856044300 Nil Nil Nil Nil Nil (Rupees, Fifteen lakhs) only Sl. No. Date 18-03-16 Nil Nil

 · 2019-10-21 · Total uanti 2017-18 4922651 MT Nil Nil Nil Nil durin the ear 2018-19 4123077 MT Nil Nil Nil Nil All the tailings of beneficiation plant are being discharged to

GST GST VER 2.7/SUVIDHA SOC/WPC/03-20 · Nil Nil Nil Nil Nil Nil Nil Nil Nil Nil ^# GST GST Speed Clearing Nil Nil Nil Nil - Nil Nil Nil - The following benefits will be applicable

What Really Matters Is Your Business - MENOG · 2017. 4. 25. · © 2013 NIL Security tag: INTERNAL 11 There’s More to Clouds Than Virtual Machines Infrastructure-as-a-Service

Agenda for General Manager's Conference...Mau 1 1 Azamgarh 2 1 Varanasi City 1 9 Salempur Nil 2 Bhatni Nil 6 Siwan Nil 11 Thawe Nil 6 Kaptanganj Nil 2 Ghazipur City Nil 1 (DMU) Barhaj

Bojan Radulović · 2017. 11. 17. · © 2017 NIL, Security Tag: PUBLIC 2 Bojan Radulović SP team tech lead Consultant Instructor Areas of interest Orchestration SP SDN IoT

cgwb.gov.incgwb.gov.in/INTRA-CGWB/documents/IPR 2018.pdfResale Flat Purchased vide Sale deed No-586/481 date 0902.2017 of Ranchi ( Nil Nit Nil Self occupied Nii Nil Nil Nil Nil Nil

,Wi...Mizo 01 Nit Nil Nil Nil 01 1.2 Economics Nil 08 14 Nit Nil 22 13 Sanskrit Nil Nil t2 01 01 14 1.4 Commerce Nil 01 L5 01 01 18 15 Kak-barak 10 04 05 Nil Nil 19 1.6 Geography

Bhim Singhceobihar.nic.in/.../Council_bye_election_2009/Bhim_Singh.pdfBhim Singh Malti Singh Neha Singh Dependent- 2 Nisha Singh (Daughter) Nil Nil Nil Nil Nil Depende nt- 3 etc. Nam

A F ENTERPRISES LIMITED - valueresearchonline.com F ENTERPRISES LIMITED ... 61,206 27,677 1,65,716 3,90,000 Nil Nil Nil Nil Nil ... DIN : 02994228 DIN : 03603706M. No. A40303 Neeraj