Cybersecurity in Critical? Infrastructure

Federal IT Steering Unit FITSU Federal Intelligence Service FIS

Reporting and Analysis Centre for Information Assurance MELANI

Cybersecurity in Critical? Infrastructure

13. October 2016

Daniel Rudin, Sector Advisor ICS MELANI / GovCERT.ch

FITSU / FISReporting and Analysis Centre for Information Assurance MELANI

Agenda

• Introducing MELANI• Current Situation• Does it matter to us?• What can/should we do?• Questions

Cybersecurity in Critical Infrastructure / 13.10.2016 / D. Rudin


Mandate / PPP

Create and operate a Reporting and Analysis Centre for Information Assurance MELANI with the purpose to protect Swiss Critical Infrastructures from Cyber-Attacks



MELANI

DFF / FITSUDirection and Strategy

GovCERT.chTechnical Analysis

DDPS / FISMELANI OICOperation Information Centre

Closed Constituency

Sectors (in alphabetic order)ArmamentChemistry / PharmaceuticsEmergency ServicesEnergyFinanceGovernmentHealth CareIndustryInsurance CompaniesMediaTelecommunicationTransportation/Logistics

Public SectorPME and citizens

www.melani.admin.ch

International Relationships- Interpol- Europol

IT Industry-Microsoft- Google-Avira- F-Secure….

GovernmentCERT‘sEGC

Other Governments- CPNI- BSI- A-SIT- ...

High Tech Crime Units- Club de Berne

Science and Research- Universities- Technical colleges

F I R S TForum of Incident Responseand Security Teams



191 companies within the Closed Constituency (as of: 2016-06-03)Emergency Services Chemistry / Parmaceutics Energy Finance

Health Care Industry Media Armament Telecommunication

Transportation/Logistics Insurance Companies Government (federal/cantonal/cities)



Public Products: Semi annual report



Public Products: Newsletters and Papers



Public Products: GovCERT.ch Blog



Public Products: antiphishing.ch



Current Situation

10Cybersecurity in Critical Infrastructure / 13.10.2016 / D. Rudin

Betrieb


Cyber Actors

11Cybersecurity in Critical Infrastructure / 13.10.2016 / D. Rudin

Betrieb

VandalismScript Kiddies

Hacktivism

Organised Crime

TerrorismNation States


Ransomware



Ransomware


August 2016 FireEye


Social-Engineering

• Phishing• Sextortion• CEO-Fraud• ………



Data Breaches



DDOS



Internet of Things (IoT)



Internet of Things (IoT)



Why is the adversary still winning?

Monthly cost (average per capita):Toilet Paper: Fr. 4.60E-Mail-Security: Fr. 2.70



Protection vs. Detection vs. Response



‘Defense in Depth’• Access Control, EncryptionData

• App-Hardening, Anti-Malware, UACApplication

• Hardening, Updates, AuthenticationEndpoint

• Segregation, IPSInternal Network

• Firewalls, NAT, VPNPerimeter

• Locks, Badges, TrackingPhysical Security

• Education, DocumentationPolicies, Procedures, Awareness



Change of Perception?



Daniel RudinSector Advisor ICS MELANI / GovCERT.ch

Schwarztorstrasse 593003 Bern

Thank you for your attention


Date post:	14-Feb-2022
Category:	Documents
Upload:	others
View:	7 times
Download:	1 times

Cybersecurity in Critical? Infrastructure

Documents

CYBERSECURITY: Continued Attention Needed to Protect Our Nation’s Critical Infrastructure

Framework for Improving Critical Infrastructure Cybersecurity Overview and Status Executive Order 13636 “Improving Critical Infrastructure Cybersecurity”

Framework for Improving Critical Infrastructure …blog.cybersecuritylaw.us/wp-content/uploads/2015/11/cybersecurity...Framework for Improving Critical Infrastructure Cybersecurity

Framework for Improving Critical Infrastructure Cybersecurity, … · 2019-10-12 · Critical Infrastructure Cybersecurity Version 1.1 National Institute of Standards and Technology

Framework for Improving Critical Infrastructure Cybersecurity ...

Cybersecurity in Modern Critical Infrastructure Environments-SECURE ICS_Overview_FINAL_2015

Improving Critical Infrastructure Cybersecurity … Critical Infrastructure Cybersecurity Executive Order ... for improving critical infrastructure cybersecurity ... process itself,

Critical Infrastructure Protection: Cybersecurity ... · Infrastructure Protection Plan (NIPP), which provides the overarching strategy for integrating the nation’s critical infrastructure

Framework for Improving Critical Infrastructure Cybersecurity · 2016-04-12 · Framework for Improving Critical Infrastructure Cybersecurity ... “It is the policy of the United

Cybersecurity in Critical Infrastructure – Operational Technology · 2020. 10. 24. · PwC | Cybersecurity in critical infrastructure – Operational Technology 16. Significant

Critical Infrastructure Cybersecurity - NIST · Improving Critical Infrastructure Cybersecurity “It is the policy of the United States to enhance the security and resilience of

Framework for Improving Critical Infrastructure ... · Cybersecurity Framework Charter. Improving Critical Infrastructure Cybersecurity. February 12, 2013 “ It is the policy of

Office of Cybersecurity and Critical Infrastructure …...• Centre for Cyber Security, Danish Defence Intelligence Service • Office of Cybersecurity and Critical Infrastructure

NIST Cybersecurity Framework Explained · 2019-07-26 · Framework for Improving Critical Infrastructure Cybersecurity (the “Cybersecurity Framework”) • Framework Overview •

Cybersecurity: Critical Infrastructure Authoritative … · · 2017-04-24Cybersecurity: Critical Infrastructure Authoritative Reports and Resources Rita Tehan Information Research

Executive Order 13636: Improving Critical Infrastructure Cybersecurity

Framework for Improving Critical Infrastructure Cybersecurity · 2015-08-26 · Executive Order: Improving Critical Infrastructure Cybersecurity “It is the policy of the United

Cybersecurity: Critical Infrastructure Authoritative Reports ......Cybersecurity: Critical Infrastructure Authoritative Reports and Resources Congressional Research Service Summary