Cyber Security Framework for Manufacturing
Nancy Cam-Winget
Cisco Systems Inc.
October 14, 2015

Why A Security Framework?
Vulnerabilities published at the rate IoT
devices are introduced:
http://www.pcworld.com/article/2472772/your-living-roomis-vulnerable-to-cyber-attacks.html

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

How do I build a
Secure IndustrialSystem?

www.odva.org

2Cyber Physical Security Framework: Core Functions1
IdentifyProtectDetectRespondRecover

Risk Assessment

Access ControlAnomalies &Events

Response PlanningRecovery Planning

Risk Management
Strategy

Data Security

Security
Continuous
Monitoring

Analysis

Communications

Asset Management

Information
Protection

Detection Process

Mitigation

Improvements

Awareness &Training

Improvements

ProtectiveTechnologies
1 http://www.nist.gov/cyberframework/upload/cybersecurity-framework-021214-final.pdf

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

3How do the Core Functions Map to an Industrial System?

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

4How do the Core Functions Map to an Industrial System?

Framework only works if the devices areTrustworthy

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

5What about Trustworthiness?
What can we do toverify the hardware
integrity of our products
currently deployed in
our network?

How do we trust devices?

- DSTA Singapore

Is the software
signed or integrity
protected?
Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

How do I ensure ourproducts can not betampered?

How do we ensure there areno back doors? ..
www.odva.org

6Trustworthy System Components
Trusted Supply Chain

Secure-By-Default and Trustworthy System

Product Assurance
Root of Trust

Trusted Operating System

Secure Communications

Trusted Execution

Software Integrity

Secure Data StorageEmbedded (Application) Security
Secure Device Management
Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

7

Trustworthy System Components
Trusted Supply Chain

Secure-By-Default and Trustworthy System

Product Assurance
Root of Trust

Trusted Operating System

Secure Communications

Trusted Execution

Software Integrity

Secure Data StorageEmbedded (Application) Security
Secure Device Management
Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

8Trustworthy Components  Trust Anchor Technologies.

• Product Assurance.

• Trusted Execution.

• Embedded ApplicationSecurity• Secure-By-Default &Trustworthy Solutions

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

Hardware & Software Authenticity
Counterfeit & Illegal Upgrade Protection
Immutable Product Identity

Boot-Time & Run-Time Integrity
Cyber Resiliency & Tamper Resistance
Strong Crypto & Certifiable Entropy

Secure (Application) Key Storage
Secure Crypto
IP & DRM Protection

Strong Device/Network Authentication
Secure Communication
Customer Visible Trustworthy Status
www.odva.org

9Trustworthy Device Profiles

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

10

ODVA’s role for Industrial Control Systems Cyber Security•Expand ODVA’s specification scope to include:––––––Continuation of Ethernet/IP security
Include CIP security
Define Security (Profile) Levels
Standardize a Security based Reference Architecture
Define Guidelines for secure network infrastructure deployment
Define Compliance and inter-operability requirements

Technical Track© 2015 ODVA, Inc.

2015 Industry Conference & 17th Annual Meeting
All rights reserved.

www.odva.org

1111

THANK YOU