cybersecurity in automation networks
TRANSCRIPT
Cybersecurity in
automation networksAntti Lehvonen / Cyber Security Specialist / Siemens
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved. siemens.com
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 2 Antti Lehvonen / Digital Industries
Siemens Osakeyhtiö
Siemens Osakeyhtiö Siemens AG
Liikevaihto 290 M€ 83 Mrd. €
Henkilöstö 510 379 000
Perustettu 1898 1847
Toimintamaat Suomi, Viro, Latvia, Liettua 200 maata
VastuullisuusInnova-
tiivisuus
Huippu-
osaaminen
Yhtiön arvot
Digital Industries
Smart Infrastructure
Gas and Power
Liiketoiminnot
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 3 Antti Lehvonen / Digital Industries
The ever-changing threat landscape
Cybersecurity laws and
RegulationsInternet of
Things
Professional
Hackers Vulnerabilities
§
§§
§
Page 3 V4.3
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 4 Antti Lehvonen / Digital Industries
Evolution of the cyber threat landscape
Digital Information Processing Digital Connectivity Digital Automation and Intelligence
1950s – 1960s 1980s 20151999 2010s1970s 19911990s 2020s2000s
Home computer is introduced
Computers make their way
into schools, homes, business
and industry
Digital enhancement of
electrification and automation
The World Wide Web becomes
publicly accessible
The globe is connected
by the internet
Mobile flexibility
Cloud computing enters the
mainstream
Internet of Things, Smart
and autonomous systems,
Artificial Intelligence, Big Data
Industry 4.0
Military, governments and other
organizations implement
computer systems
AOHell
Cryptovirology
Level Seven Crew hack
Denial of service attacks
Cloudbleed
sl1nk SCADA hacksInfineon/TPM
Meltdown/Spectre
AT&T Hack
Blue Boxing
Morris WormPhishing Targeting Critical
Infrastructure
NotPetya
Industroyer/Chrashoverride
WannaCryCyberwar
Stuxnet
The threat landscape keeps growing and
changing and attackers are targeting industrial
and critical infrastructures
Page 4 V4.3
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 5 Antti Lehvonen / Digital Industries
Major cybersecurity incidents 2019 in operational technology
IEC62443 - Security for
industrial automation and
control systems
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 7 Antti Lehvonen / Digital Industries
Automation network
Industrial Security ServicesCustomer Site
Security Awareness Training,
Policy and Procedures
Network Segmentation and
DMZ
Firewalls and VPN
System Hardening
Windows Patch
Antivirus and Application
Whitelisting
Industrial Anomaly
Detection
Security Monitoring
Identity and Access
Management
Security
Vulnerability Management
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 8 Antti Lehvonen / Digital Industries
Cybersecurity is not only technology
Cybersecurity is digitalization enabler
Unrestricted © Siemens Osakeyhtiö Oy 2019. All rights reserved.
29.5.2019Page 10 Antti Lehvonen / Digital Industries
Thank you
Antti Lehvonen
Cyber Security Specialist
RC-FI DI CS SD SO
Tarvonsalmenkatu 19
FI-02600 Espoo
Phone: +358 10 511 2048
Mobile: +358 50 471 0618
E-mail:
siemens.com