Critical systems must stay ahead of security threats

Critical Systems Must Stay Ahead of Security Threats
by infosecurity
 
An expert panel argues that critical systems will inevitably become more connected. CISOs need to block threats before they happen. Operators of critical systems need to accept that they will be targeted by attackers, warned a panel of experts on critical infrastructure at Infosecurity Europe.
Not only are hackers targeting industrial control, SCADA and critical systems in order to disrupt them, or to steal data, but control systems are increasingly connected to the internet, and even need to connect to consumer applications.
This, in turn, means that companies operating critical systems need to assume they will be attacked, and that an attack will succeed. Companies need not only to invest in defensive technologies, but ensure that they are resilient enough to withstand an attack, and to continue to operate.
"We need to articulate our defence and our response strategy to the board – you have to be honest," said Barrie Millet, head of business resilience, at energy company E.ON. "We are not going to stop being attacked. "There is technology and best practice, but it's about the response capability as well".
"Hackers are like water. They take the path of least resistance", said Trey Ford, global security strategist at Rapid7.
"SCADA was not designed to be connected to the internet. And we are now seeing similar challenges with the internet of things".
 
Full Article