1 00:00:00,150 --> 00:00:02,340 ICS and SCADA. 2 00:00:02,340 --> 00:00:04,680 In the realm of industrial automation, 3 00:00:04,680 --> 00:00:06,750 two systems play a huge role. 4 00:00:06,750 --> 00:00:10,500 Industrial Control Systems or ICS and Supervisory Control 5 00:00:10,500 --> 00:00:13,380 and Data Acquisition systems or SCADA systems. 6 00:00:13,380 --> 00:00:15,750 These systems are integral to the function 7 00:00:15,750 --> 00:00:18,660 of critical infrastructure, including power plants, 8 00:00:18,660 --> 00:00:21,840 water treatment facilities, and manufacturing plants. 9 00:00:21,840 --> 00:00:23,940 However, they are not without their risks 10 00:00:23,940 --> 00:00:25,380 and vulnerabilities. 11 00:00:25,380 --> 00:00:28,050 In this lesson, we're going to discuss the definitions, 12 00:00:28,050 --> 00:00:29,430 risks, vulnerabilities, 13 00:00:29,430 --> 00:00:33,150 and ways to secure ICS and SCADA systems. 14 00:00:33,150 --> 00:00:36,600 So basically, what are ICS and SCADA systems? 15 00:00:36,600 --> 00:00:38,850 Industrial Control Systems are a type 16 00:00:38,850 --> 00:00:41,010 of control system that is used to monitor 17 00:00:41,010 --> 00:00:43,260 and control industrial processes. 18 00:00:43,260 --> 00:00:45,030 These systems are typically used 19 00:00:45,030 --> 00:00:49,830 in industries such as electrical, water, oil, gas, and data. 20 00:00:49,830 --> 00:00:52,740 ICS can range from simple systems that control heating 21 00:00:52,740 --> 00:00:54,360 and cooling, to complex systems 22 00:00:54,360 --> 00:00:57,210 that control entire production processes. 23 00:00:57,210 --> 00:01:01,080 Examples of ICS include, distributed control systems 24 00:01:01,080 --> 00:01:03,510 and programmable logic controllers. 25 00:01:03,510 --> 00:01:04,860 Distributed Control Systems 26 00:01:04,860 --> 00:01:08,430 or DCS are used to control production systems 27 00:01:08,430 --> 00:01:10,500 within a single location. 28 00:01:10,500 --> 00:01:12,990 Programmable Logic Controllers are used to 29 00:01:12,990 --> 00:01:15,900 control specific processes such as assembly lines 30 00:01:15,900 --> 00:01:17,400 and factory. 31 00:01:17,400 --> 00:01:21,150 Next, Supervisory Control and Data Acquisition Systems. 32 00:01:21,150 --> 00:01:22,530 SCADA systems are a type 33 00:01:22,530 --> 00:01:25,440 of industrial control system that are used to monitor 34 00:01:25,440 --> 00:01:27,450 and control industrial processes 35 00:01:27,450 --> 00:01:29,460 that are geographically dispersed. 36 00:01:29,460 --> 00:01:31,290 These systems are typically used 37 00:01:31,290 --> 00:01:34,140 in industries such as electricity, distribution, 38 00:01:34,140 --> 00:01:37,110 water supply, and oil and gas pipelines. 39 00:01:37,110 --> 00:01:38,700 Examples of SCADA systems 40 00:01:38,700 --> 00:01:41,790 include electrical power generation, transmission, 41 00:01:41,790 --> 00:01:44,040 and distribution systems, water treatment 42 00:01:44,040 --> 00:01:45,390 and distribution systems, 43 00:01:45,390 --> 00:01:49,290 and oil and gas pipeline monitoring and control systems. 44 00:01:49,290 --> 00:01:52,410 ICS and SCADA systems were initially designed to operate 45 00:01:52,410 --> 00:01:53,820 in isolated environments 46 00:01:53,820 --> 00:01:56,220 where security was not a primary concern. 47 00:01:56,220 --> 00:01:58,710 However, with the advent of digitalization 48 00:01:58,710 --> 00:01:59,970 and connectivity, 49 00:01:59,970 --> 00:02:03,150 these systems are now more exposed to cyber threats. 50 00:02:03,150 --> 00:02:05,220 Some of the risks and vulnerabilities 51 00:02:05,220 --> 00:02:08,220 include unauthorized access, malware attacks, 52 00:02:08,220 --> 00:02:10,710 lack of updates, and physical threats. 53 00:02:10,710 --> 00:02:12,720 First, unauthorized access. 54 00:02:12,720 --> 00:02:15,420 If the systems are not adequately protected, 55 00:02:15,420 --> 00:02:17,430 unauthorized individuals can gain access 56 00:02:17,430 --> 00:02:19,473 and manipulate the system's operations. 57 00:02:20,310 --> 00:02:21,870 Second, malware attacks. 58 00:02:21,870 --> 00:02:24,150 These systems are vulnerable to malware attacks 59 00:02:24,150 --> 00:02:26,280 that can disrupt their operations. 60 00:02:26,280 --> 00:02:28,170 Third, lack of updates. 61 00:02:28,170 --> 00:02:31,170 Many ICS and SCADA systems run on outdated software, 62 00:02:31,170 --> 00:02:34,050 which can have unpatched vulnerabilities. 63 00:02:34,050 --> 00:02:36,360 Fourth and finally, physical threats. 64 00:02:36,360 --> 00:02:39,210 These systems are also susceptible to physical threats 65 00:02:39,210 --> 00:02:42,063 such as damage, the hardware or infrastructure. 66 00:02:43,140 --> 00:02:45,780 Securing ICS and SCADA systems is a complex task 67 00:02:45,780 --> 00:02:47,970 that requires a multi-faceted approach. 68 00:02:47,970 --> 00:02:50,283 Here are some of the ways that can be used 69 00:02:50,283 --> 00:02:52,470 to enhance the security of these systems. 70 00:02:52,470 --> 00:02:55,920 First, implementing strong access control. 71 00:02:55,920 --> 00:02:58,020 This includes using strong passwords, 72 00:02:58,020 --> 00:03:00,300 two factor or multifactor authentication 73 00:03:00,300 --> 00:03:03,120 and limiting access to only those who need it. 74 00:03:03,120 --> 00:03:06,600 Second, regularly updating and patching systems. 75 00:03:06,600 --> 00:03:08,460 Keeping the systems updated can help to 76 00:03:08,460 --> 00:03:11,250 protect against known vulnerabilities. 77 00:03:11,250 --> 00:03:12,810 Third, using a firewall 78 00:03:12,810 --> 00:03:15,780 and intrusion detection system, these can help detect 79 00:03:15,780 --> 00:03:18,060 and prevent unauthorized access. 80 00:03:18,060 --> 00:03:20,940 Fourth, conducting regular security audits. 81 00:03:20,940 --> 00:03:24,000 Regular audits can help identify potential vulnerabilities 82 00:03:24,000 --> 00:03:26,820 and address them before they can be exploited. 83 00:03:26,820 --> 00:03:29,160 Finally, employee training. 84 00:03:29,160 --> 00:03:32,190 Employees should be trained on the importance of security 85 00:03:32,190 --> 00:03:35,373 and how to identify and respond to potential threats. 86 00:03:36,240 --> 00:03:37,680 So remember, ICS 87 00:03:37,680 --> 00:03:39,570 and SCADA systems are crucial components 88 00:03:39,570 --> 00:03:41,220 of our critical infrastructure. 89 00:03:41,220 --> 00:03:43,590 While they bring numerous benefits in terms of automation 90 00:03:43,590 --> 00:03:45,090 and efficiency, they also come 91 00:03:45,090 --> 00:03:47,040 with risks and vulnerabilities. 92 00:03:47,040 --> 00:03:48,930 It's essential to understand these risks 93 00:03:48,930 --> 00:03:51,360 and implement robust security measures to 94 00:03:51,360 --> 00:03:52,920 protect these systems. 95 00:03:52,920 --> 00:03:56,550 Regular updates, strong access controls, use of firewalls, 96 00:03:56,550 --> 00:03:59,580 and intrusion detection systems, regular security audits 97 00:03:59,580 --> 00:04:01,920 and employee training are all crucial components 98 00:04:01,920 --> 00:04:04,803 of a comprehensive security strategy.