Improve the stability of the connection between key equipment such as switchgear and UPS and the energy management system

With the increasing need for the convergence of OT (operational technology) and IT (information technology), data security is a more important concern than ever. In fact, a query by the World Data Corporation (IDC) found that security was considered the number one barrier to OT/IT integration. Together, it is also seen as one of the top five motivators for OT/IT integration and an important means of achieving OT/IT convergence. However, the integration of OT and IT stacks from traditional closed data stacks to open data stacks can lead to unauthorized access by unauthorized users to arrange private operations on data.

Improve the stability of the connection between key equipment such as switchgear and UPS and the energy management system

　　Helen Chiang, general manager of IDC Taiwan, said on Moxa's security talk show, "If we take a closer look at why security is the biggest obstacle, one of the most important security issues in an OT environment is how to securely and reliably protect an existing system. At the OT level, you'll find a lot of established systems and usages. Not only are they self-contained, but they don't have clients, which means that these assets have limited resources to run the security solutions we typically use in IT environments. ”

When connecting an existing system to a network, there are a few tricks that can be used to enhance the security of the connection and alleviate the security concerns of users about OT/IT integration projects.

Tip 1: Change the default password for internet-connected devices

The existing system is connected to the network through networked devices. Therefore, the first thing to do to improve cohesion security is to change the default cipher of connected devices. The security strength of the acquiesced cipher is usually low and can be easily found in the exposed user manual. It's easy to do this to prevent problems before they happen.

Tip 2: Disable unused but connected ports and services

When setting up networked devices, unused ports or unnecessary services can make your use more likely to be threatened by the network. You can disable these ports and services in case they are provisioned for unnecessary visits.

Tip 3: Verify the source before updating the firmware

When a connected device needs to update its firmware, make sure you have a mechanism to verify the origin of the firmware. The ability to view cyclic redundancy check (CRC) code ensures that the firmware you are about to use comes from an official source. Another method is to use the secure power function to ensure the integrity of the operating firmware.

Tip 4: Use secure communication protocols

It is important that a networked preservation system uses secure protocols (i.e., HTTPS and SNMPv3 protocols that support TLS 1.2). Security protocols reduce unnecessary visits to networked devices and enhance the integrity of data transmission. In addition, when arranging networked devices, it is necessary to disable insecure protocols to minimize the possibility of human error.

Tip 5: Only allow authorized users to visit your device and network

Prioritize critical assets and enable network partitioning to know exactly what permissions are available for a particular partition. In addition, set up trust lists, such as IP addresses that are allowed to visit, to prevent unauthorized users from visiting the preservation system. It also provides the ability to use other advanced features to limit unwanted visits, such as defining special protocol formats or commands for devices and networks.

Tip 6: Encrypt critical data before transferring

In an OT environment, critical data leaks can lead to system downtime that impacts operating power. For the existing networked system, the transmitted critical data can be encrypted, the confidentiality of the data can be enhanced, and the possibility of negative impact on daily operations can be reduced.

Tip 7: Continue to monitor if your network devices are at a normal level of security

When connecting an existing system to a network, security measures should be defined according to the needs of the use, so that networked devices can be easily monitored and managed. When the system network is up and running, continue to monitor the security status of the equipment to ensure that it meets the requirements of the initial setup.

Tip 8: Scan the crevices regularly for potential threats

It is important to understand the potential threats to preservation systems. Scanning gaps regularly can help you better understand the security posture of your entire system and take necessary actions as appropriate.

Tip 9: Add security patches to your connected devices and cut down on the gaps

Security patches are notoriously important. However, patching equipment on the job site is not an easy task. From an enterprise perspective, when you pause jobs to test and execute patches, you can incur significant costs. But if you don't add security patches to your devices, risks and costs can follow. A more sustainable compromise is to add security patches to critical system settings at a manageable cost.

Tip 10: Add virtual patches to known gaps in the preservation system

Sometimes there are no security patches available for the system, and there are other save systems that cannot perform the patch. For these situations, adding virtual patches is a good choice. You can add virtual patches to the network to which your save system is connected to fix known gaps and protect your devices from intrusion. Setting up virtual patches for your system before the next protection cycle is also a good way to reserve a buffer moment.

Improve the stability of the connection between key equipment such as switchgear and UPS and the energy management system

Sections viewed

Contact

working hours