אירועים והרצאות בפקולטה למדעי המחשב ע"ש הנרי ומרילין טאוב

Industrial Control Systems (ICSs), also known as Operation Technology (OT) systems, are distributed computerized systems designed to manage, monitor and control industrial processes. They are widely used in critical infrastructures, such as power plants and water supply, whose continuous operation is of major importance to modern life. Following the well-known Stuxnet attack on OT systems, a large investment in OT security was started. Though their cyber protection is crucial, they did not yet reach the same level of cyber protection maturity as Information Technology (IT) systems. In this research, we make two complementary contributions. The first is to show that the existing systems are vulnerable by demonstrating novel attacks against ICS systems. The second is to propose a secure architecture and protocol for ICS systems in large organizations. Our protocol is carefully designed to defend against attacks and support the unique requirements of these environemnts (e.g., central management of devices and support for legacy devices).