Legacy Systems, Real-World Impacts: The Reality of OT Security

https://www.securityweek.com/wp-content/uploads/2022/04/Industrial-Cyber-threats.jpg

I’m here today to write about one particularly thorny area of operational technology (OT) and security that I run into somewhat routinely. Given my own particular interests as an incorrigible vulnerability-gazer, and my professional role as vice president of security research at runZero, I deal with OT security issues more often than the average bear. I’ve noticed that there’s definitely a vibe of, “IT be like this, but OT be like that” going on in the wider world of vulnerability management. The process of discovering, documenting, and disclosing vulnerabilities all have their own little quirks here in OT-land, so let’s jump into it!

Here, everything is legacy

At DEF CON, the ICS Villageis one of the more popular places to hang out. It works well for folks who are either new to the field of infosec and cybersecurity, or old-hands in the industry, for the same reason: once you...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE