End-to-end cybersecurity of OT networks from the SOC to the edge

Operational technology (OT) networks – whether in the energy, water or manufacturing sector – are becoming increasingly complex and integrated. Firewalls are often the only means of protection. While these usually reliably detect known malware, they are blind to new types of attack patterns and professional attacks that tend to run over months or years. No firewall can cope with the 320,000 new malware variants that appear on the scene every day, according to the German Federal Office for Information Security (BSI). At the same time, there is a lack of both skilled personnel for Operational Technology (OT) cybersecurity and a reliable security design of OT components.

In this talk, Klaus Mochalski, CEO of OT security company Rhebo, presents results from risk analyses, security audits and OT monitoring at utility and industrial companies. He outlines the still striking risk exposure and hidden vulnerabilities of OT due to lack of visibility and security mechanisms. He then presents an end-to-end intrusion detection system for the OT in accordance with the requirements of international standards like IEC 62443 and the NIS directive, which provides OT visibility and actionability for security officers and security operation centers (SOCs) – from the central control room to the IIoT edge. He showcases a continuous OT monitoring solution with asset discovery, real-time intrusion detection and anomaly detection that empowers SOC teams to quickly, reliably and easily detect and defend against cyberattacks on industrial critical infrastructure.