On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of...
Transcript of On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of...
![Page 1: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/1.jpg)
On the Patch TreadmillOngoing Support and Maintenance of ICS PlatformsEric Byres, P.Eng, ISA [email protected]
![Page 2: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/2.jpg)
The Conflict: Stability vs. Agility
• Industrial processes demand:○ Thoughtful design○ Change control○ Careful testing
• Security demands: ○ Agility and rapid response ○ The bad guys aren’t waiting for you to be “ready”
![Page 3: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/3.jpg)
A Small Political Problem?
![Page 4: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/4.jpg)
Walking into a TrapAre those patches counterfeit?
Vendor Website
Industrial Facility
IndustrialTechnician
CyberAttacker
![Page 5: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/5.jpg)
What am I Patching?• What equipment actually needs patching?
(Asset Management)• Do I really know what software need?
(Software Inventory)• Do I really know where the software came from?
(Software Supply Chain)
![Page 6: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/6.jpg)
An Organized Panic?• Which patches matter, which patches don’t?
(Prioritization)• Where do I start patching first?
(Patch roll-out strategies)
![Page 7: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/7.jpg)
Mitigating ControlsWhat to do while you are waiting to patch?
• Waiting for the manufacturer to approve the patch• Waiting for a maintenance window to install the patch• The patch breaks the process• Waiting for Godot… will there ever be a patch?
![Page 8: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/8.jpg)
Can We Win the Battle?
“Hot Oil! We need hot oil…Forget the water balloons!”
![Page 9: On the Patch Treadmill - 0501.nccdn.net · On the Patch Treadmill OngoingSupport and Maintenance of ICS Platforms Eric Byres, P.Eng, ISA Fellow ... ○ Change control ○ Careful](https://reader033.fdocuments.in/reader033/viewer/2022060418/5f159b4f7c2f5a0f18547480/html5/thumbnails/9.jpg)
Final thoughts…
9
“The picture is pretty bleak gentlemen… The world’s
climates are changing, the mammals are taking over, and we all have a brain the
size of a walnut”