The Airgap is Not Enough – Cybersecurity Perimeters in OT Networks
Series: O&M, Cybersecurity and the Digital Plant
Many power companies implemented a perimeter defense paradigm based on an “air-gap” separation from the internet to secure their Operational Control (OT) networks. Unfortunately, the perimeter defense paradigm is not robust enough to truly secure a system on its own. Supply chain compromise, zero-day attacks, and social engineering are simple, well proven methods for overcoming the airgap defense. Cyber attackers continue to innovate and create new methods for compromising systems. It is naïve to think they have not and will not find further methods of attack. Knowing that the airgap is insufficient, companies that employ these solutions should consider more robust methods for securing their valuable networks.