securing campus critical infrastructure: is the grid safe? (243260993)
TRANSCRIPT
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 1/15
Is the Grid Safe?
Jay DominickDonna Tatro
Princeton University
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 2/15
Why This? Why Now?
• "#$%& '()&$%& *% +,-)./&0.#1*.23*2.)4.%*)3$%& – 5*26&)* -)3%7)1 42-8/3
– 9&:21*., ;)*1 <%../):
– =%>).&7)&* ;)*1 <%../):
– ?6)32$>) @.:). ABCBC 42-8/1D): E)-F GHAB – "95I +,-).1)32./*, E.#7)<%.J 42-8/1D):F
E)- GHAK
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 3/15
• L%3#8 '()&$%& *% +,-)./&0.#1*.23*2.) – '33/:)&*#8 L)#.&/&; @44%.*2&/$)1
– 5)32./*, 9&3/:)&*1
– @4).#$% I)3D&%8%;, :)7#&:1
Why This? Why Now?
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 4/15
• M%<).F NO'+F P#*).F M2-8/3 5#0)*,1,1*)71 Q7%&/*%./&;F 3%772&/3#$%&1F#33)11RF #&: )&>/.%&7)&*#8 3%&*.%81 0%..)1)#.3D 8#-%.#*%./)1
• ID) 3D#88)&;)S – ")< ./1J1 /&*.%:23): -, 9MT&)*<%.J -#1):
%4).#$% *)3D&%8%;/)1
Operational Technology
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 5/15
• 54)3/#8/U): 1,1*)71 4%.*): 0.%7 *D)<%.8: %0 V5TGBGF V5TKGGF )*3W – +./$3#8 1,1*)71 7%>): *% 1);7)&* %0
3#7421 &)*<%.J – AHHX 24T$7)
• Y90 /*Z1 &%* -.%J)&[\• 9IF 7))* @I
Operational Technology
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 6/15
• 9&0.#1*.23*2.) Y5277/*1\
• ID) VEM – ID) Y]#;&/^3)&* _\
• V/1J '11)117)&* – +2..)&* 1*#*)
– O28&).#-/8/$)1 #&: 4.%3)11 ;#41
– V)7):/#$%&
First Steps
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 7/15
NIST Cyberinfrastructure Framework
!"#$%&'( *+",- .%/0'1#%2 3#% 456'%783%/9:%$&:$%';
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 8/15
Cimation Framework!"#$% '( )%*+,-./ 0%1%2-#345!,46,#1 7 !%,84,1#5*%9#5#6%1%5.+%&$&2%21 ]%&/*%./&; ̀ '8).$&;M)./%:/3 I)1$&; ̀ O#8/:#$%&
+%&$&2%21 974.%>)7)&*S #11)11 ̀)&D#&3) 1)32./*, 4%1*2.)
I)3D&/3#8 #112.#&3) #&: .)4%.$&;V2& ̀ 7#/&*#/& ;%>).&#&3) a)6)32$%&
!"#$% :( !4;-*/ 7 !,4*%2+,%<%=5-345 @-*#/& ?6)32$>) 54%&1%.1D/4
?1*#-8/1D =%>).&#&3) =.%24
?>#82#*) 5)32./*, @-b)3$>)1F V%8)1#&: c21/&)11 V/1J
d)^&) 5)32./*, M%8/3/)1 #&: 5*#&:#.:1
c2/8: #&: *.#/& # 3.%11T02&3$% *)#7
9&>)&*%., 9I #&: 9+5 #11)*1
!"#$% >( ?$$%$$1%5. #52?@#,%5%$$='M #,1/1 #;#/&1* )6/1$&; #11)*1
9:)&$0, *)3D&/3#8 #112.#&3) 3%&*.%810%. 3#4/*#8 4.%b)3*1
+.)#*) 1*#&:#.: 4.%32.)7)&* 8#&;2#;)
M./%./$U) 7/$;#$%& 4.%b)3*1
!"#$% A( )%*+,-./ )4;+345 7B1C;%1%5.#3455)32./*, 1%82$%& :)1/;&
5)32./*, 1%82$%& /748)7)&*#$%&
?1*#-8/1D 3)&*.#8 *)#7 *% 1244%.* 9+51)32./*, 1%82$%& 1244%.*
E)):-#3J 4.#3$3#8 /748)7)&*#$%&8)11%&1 8)#.&): -#3J /&*% 4%8/3/)1 F1*#&:#.:1 #&: 1244%.* 7%:)8
!&#$%:'95 #3 470/<#8;
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 9/15
Vulnerabilities
• E/&:/&;1S AG 1)./%21F AG D/;DF KC7%:).#*)F Ae 8%< ./1J1 – +O?1F 4#*3D 8)>)81 #&: 1)32./*, 4.#3$3)1
• M.%3)11 /74.%>)7)&*1 .)3%77)&:): – d%327)&*#$%&
– 9&3.)#1): ]%&/*%./&;
– +%88#-%.#$%& #&: 3.%11T*.#/&/&;
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 10/15
Remediation
• P/&:%<1 1).>).1 – M#*3D %. /748)7)&* #8*).&#*) 4.%*)3$%&
• P%.J1*#$%&1
• V)T#.3D/*)3$&; 1).>).1 0%. N' – O/.*2#8/U#$%& #&: /&3.)#1): 7%&/*%./&;
• ]%&*D8, 3.%11T*.#/&/&;
• P))J8, 3D#&;) 7#&#;)7)&* 7))$&;1
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 11/15
Operational Technology Group SWOT
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 12/15
Information Technology Group SWOT
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 13/15
Learning Together
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 14/15
Wrap Up
• +,-).T/&0.#1*.23*2.) '<#.)&)11 /1 D).) *% 1*#,
• 9I 3%74%&)&* %0 @I /1 ;%/&; *% /&3.)#1)
•
@I 3%74%&)&* %0 9I /1 2&f2)1$%&#-8,/74%.*#&*
P) D#>) *% <%.J *%;)*D). *%J))4 *D) =./: 1#0)g
8/10/2019 Securing Campus Critical Infrastructure: Is the Grid Safe? (243260993)
http://slidepdf.com/reader/full/securing-campus-critical-infrastructure-is-the-grid-safe-243260993 15/15
Help Us Improve and Grow
Thank you for participating
in today’s session.We’re very interested in your feedback. Please take
a minute to fill out the session evaluation found withinthe conference mobile app, or the online agenda.