## 5 Application
### Security Measures  
Over the past few decades, the automation of industrial systems has been steadily gaining momentum. Business demands continuous improvements in the efficiency of the production process, thus, the depth of IT penetration and system connectivity grows continuously; industrial facilities are connected to corporate networks and are frequently  
Figure 3: Hasse Diagram for set \(\hat{\mathrm{F}}\).  
managed remotely over the network. However, along with their benefits, these new technologies have brought new threats into the world of industrial automation, and these new threats came as a surprise. The Industrial Control Systems (ICS) in place today were designed to operate for decades, and many of them were developed without any serious regard to IT security.  
The stable operation of today's industrial networks can be disrupted, not only by a failure at a production unit or an operator's error but also by a software error, an accidental infection of workstations with malware or a deliberate cybercriminal attack.  
Some security measures are given below. Figure 4 portrays the flowchart for the process being followed in the application.  
**I. Default-deny as a standard policy:** In default-deny mode, the ICS works in a protected environment that only allows programs to run that are required for the technological process to function. All unknown and unwanted applications, including malicious programs, are blocked. Thus, a secure running environment is created with minimum load on system resources.
**II. Proactive protection** against unknown malicious programs and automatic protection against exploits. The technology scans executable programs, assessing the security of each application by monitoring its activities when in operation.
**III. Device Control technology** helps to manage removable devices (USB storages, GPRS modems, smartphones, USB network cards) and creates limited lists of permitted devices and the users who can access them.
**IV. All-in-one IT security console** helps to monitor and control all solutions to ensure IT security. With the single management console, admins can install, configure and manage security, and access reports.
**V. Integration with SIEM** (using special connectors) allows admins to export information about security incidents at protected nodes of the technological network into the corporate SIEM system.  
The above security measures are abbreviated and assigned degrees of membership and degrees of non-membership values. Table 1 contains the details of their abbreviations and values of degrees.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Security Measures** & **Abbreviations** & **Membership** & **Non-Membership** \\ \hline Default-deny as a standard policy & \(DD\) & \([0.550,0.600]\)\(\mu\)\({}^{616(0.500,0.750)}\)\(\pi\) & \([0.300,0.400]\)\(\mu\)\({}^{616(0.125,0.313)}\)\(\pi\) \\ Proactive protection & \(PP\) & \([0.475,0.525]\)\(\mu\)\({}^{616(0.375,0.438)}\)\(\pi\) & \([0.250,0.375]\)\(\mu\)\({}^{616(0.125,0.250)}\)\(\pi\) \\ Device Control technology & \(DCT\) & \([0.375,0.525]\)\(\mu\)\({}^{616(0.488,0.563)}\)\(\pi\) & \([0.200,0.350]\)\(\mu\)\({}^{616(0.188,0.250)}\)\(\pi\) \\ All-in-one IT Security Console & \(ITSC\) & \([0.400,0.500]\)\(\mu\)\({}^{616(0.313,0.438)}\)\(\pi\) & \([0.250,0.350]\)\(\mu\)\({}^{616(0.250,0.313)}\)\(\pi\) \\ Integration with SIEM & \(SIEM\) & \([0.300,0.375]\)\(\mu\)\({}^{616(0.563,0.613)}\)\(\pi\) & \([0.275,0.325]\)\(\mu\)\({}^{616(0.188,0.313)}\)\(\pi\) \\ \hline \hline \end{tabular}
\end{table}
Table 1: Details of security measures.  
Figure 4: Flowchart for the process being followed.