Fortinet Workshop: Applying Automation and Control Principles for an Active Cyber Defense in Operational Technology

Cyber criminals continue to expand their OT targets of primary interest to all devices that are digitally connected.  Defenders protecting critical infrastructure, from the edge to the cloud, realize that readiness can make a difference in the impact a cyberattack can have on industrial control systems (ICS).  Now the U.S. Government is driving the need for readiness across key industries like the electric system, oil & gas, water & wastewater, and chemical manufacturing as identified in the recent National Security Memorandum.

Automation and controls have long been the foundation of the process that enables the production of goods across many industries. Within these cyber-physical environments, an active cyber defense strategy for operational technology (OT) could benefit from the principles used for automation and control in industrial environments.  While automation has been seen as a detriment to digital security for OT – when governed by ICS standards – value can be realized that yields staff capacity efficiency or scalability to ensure cybersecurity readiness. 

During this cybersecurity workshop, experts from Fortinet will explore the use of  

  • Deception integrated with SCADA system to lure an attacker and trigger automation to deliver as close to zero false positives as possible.
  • Event correlation to proactively detect changes across the OT environment to ultimately identify specific events that are actionable. 
  • Incident management to prevent organizational disruption of operations, business functions, or services.
  • Continuous Posture Assessment to achieve a level of visibility across OT asset inventory and the related attack surface.
Monday PM
S2b: 12:15 PM Track 3 (Oceans 12)