Introducing Daniel Kelley
Hi, I'm Daniel Kelley, a former black-hat computer hacker who is now reformed. Last month, I joined Awen as a Senior Security Consultant to produce web-based content and to assist the larger team where possible.
In this issue, we will explore the various types of Operational Technology (OT) and gain a deeper understanding of why the term encompasses more than just your typical household device. By the end of it, you will have a stronger comprehension of what OT truly is and its overall significance.
During my years as a black hat hacker, I was often exposed to the importance of vulnerable endpoints and services associated with OT devices. Interestingly enough, today, you can still find hundreds of thousands of interfaces associated with OT, publicly connected to the internet. If you'd like to see for yourself, here is a search query that you can enter on Shodan, which allows you to view submarine mission-control dashboards.
Following The Origin And Roots
In a nutshell, OT refers to the hardware and software used to control and monitor physical processes. It can often be found in a variety of different industries including; manufacturing, transportation, and healthcare. The term itself also includes devices, networks and systems that are used to process and act on data in real time. These systems have been in use for decades, dating back to the late 1960s, but the term "OT" didn't become widely recognised until the early 2000s.
1. Industrial Control Systems (ICS)
The first type of OT are ICSs. These are designed specifically to control and monitor industrial processes. These systems consist of hardware and software components that work together to regulate various operations. An example of this would be controlling the flow of water in a hydroelectric power plant or monitoring the temperature in a chemical reactor.
These systems offer highly customizable and tailored solutions for each industrial process. Real-time monitoring and control is also possible, improving the overall efficiency of industrial operations and reducing the likelihood of human error.
2. Programmable Logic Controllers (PLC)
PLCs are small, specialised devices designed to operate in tough industrial environments. They are often used in manufacturing contexts to control the operations of machinery; for example, the process of filling and sealing packages in a food packaging factory.
They often provide a high level of precision and control, and are known for their reliability and ease of programming. Additionally, PLCs offer a great level of flexibility and adaptation, allowing for quick changes to be made to accommodate any modifications.
3. Distributed Control Systems (DCS)
DCSs are systems consisting of an array of devices distributed throughout a specific facility. Industrial plants often use them to monitor and control the flow of various substances. Furthermore, DCSs are often integrated with other systems like SCADA to provide a comprehensive solution for managing complex industrial processes.
Often thought of as a centralised solution for managing and controlling large-scale operations, the coordinated approach they offer improves efficiency and reduces downtime. They are also great at scalability, making them optimal for expanding operations.
4. Supervisory Control and Data Acquisition Systems (SCADA)
SCADA systems are often composed of a central system that communicates with remote devices, such as Programmable Logic Controllers (PLCs). The main function of SCADA systems is to gather data from these remote devices and use it to make decisions regarding the control of the overall process.
It is important to note, however, that SCADA systems are distinct from DCSs, which are also used in industrial process control. DCSs are more complex systems offering a higher degree of control and automation, often used in large-scale industrial processes. In contrast, SCADA systems are simpler and more cost-effective, making them more suitable for smaller, less complex processes.
Here’s A Final Overview
In conclusion, OT involves a wide range of systems and devices that play a crucial role in various industries. Unfortunately, it is not possible to cover every type of OT in this issue. However, I hope that you have gained a stronger understanding of what OT is and the importance it holds in the real world.
Sadly, the lack of standardisation is evident; many of these systems were not created with an emphasis on security at all, and as a result, they often have inadequate or nonexistent security measures. However, Awen is one of the few cybersecurity companies in Wales focusing on this specific issue and striving to change it for good
These technologies are responsible for automating and controlling various processes, and without them, society would not function as smoothly as it does. Unfortunately, due to this reliance, they are lucrative for cybercriminals and are at risk of potential cyberattacks which are taking place on a daily basis.
