The stated mission of CSSC is to reduce vulnerability of critical infrastructure to cyber attack on control systems. The description and analysis of incidents reported herein support three CSSC tasks: establishing a business case increasing security awareness and private and corporate participation related to enhanced cyber security of control systems and providing informational material to support model development and prioritize activities for CSSC.
The Analysis Function of the US-CERT Control Systems Security Center (CSSC) at the Idaho National Laboratory (INL) has prepared this report to document cyber security incidents for use by the CSSC. INL also provides staffing and operational support to the DHS Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) Security Operations Center which responds to and analyzes control systems cyber incidents across the 18 US critical infrastructure sectors. These trainings vary from web-based cyber security trainings for control systems engineers to more advanced hands-on training that culminates with a Red Team/ Blue Team exercise that is conducted within an actual control systems environment. In support of the CSSP, INL develops and conducts training courses which are designed to increase awareness and defensive capabilities for IT/Control System professionals. Within the test bed, INL researchers systematically examine control system components and work to identify vulnerabilities. In support of the NSTB, INL hosts a dedicated SCADA testing facility which consists of multiple control systems supplied by leading national and international manufacturers. The Idaho National Laboratory (INL) is a key contributor to the Department of Energy National SCADA Test Bed (NSTB) and the Department of Homeland Security (DHS) Control Systems Security Program (CSSP), both of which focus on improving the overall security more » posture of ICS in the national critical infrastructure. To combat this growing challenge, government, private industry, and academia are working together to reduce cyber risks. In today's interconnected environment, this can present a serious cyber security challenge.
Service providers rely on industrial control systems (ICS) to manage the flow of water at dams, open breakers on power grids, control ventilation and cooling in nuclear power plants, and more.
0 kommentar(er)
