내부자 위협 탐지: 논의되지 않고, 보고되지 않는 사이버 보안 과제 OT/ICS 사이버 보안 과제
지금 등록하기
Also referred to as industrial control systems (ICS), cyber-physical systems
Based on parameters set by people, control systems are automated to work together seamlessly with human intervention needed only when an alert signals that something is awry. Most often OT is found in industrial environments, including critical infrastructure sectors like manufacturing, energy, transportation, water and wastewater, and oil and gas. However, things like HVAC systems, escalators and elevators are also considered OT.
It refers to specialized computer systems used to control and monitor industrial processes. They are typically mission-critical and require high availability. Anything tangential to the process, such as the software embedded in equipment or added for control, management and monitoring would be considered OT but not ICS.
An ICS may operate autonomously, but more often its components retrieve real-time data from factory, rail system, pipeline or other industrial process that enables operators to make informed decisions and keep systems running smoothly. Key ICS components include programmable logic controllers (PLCs) used to control the robotic arms that weld car frames together on an assembly line, remote terminal units (RTUs) that regulate stoplights to optimize traffic flow, or a distributed control system (DCS) controlling the refining process in oil refinery.
ICSs function either as a continuous process control system managed by programmable logic controllers (PLCs), or as a discrete process control system (DPC), which may rely on a PLC or other batch process control device.
In turn, nearly all ICSs roll up to a supervisory control and data acquisition (SCADA) system, which provides real-time monitoring, control and visibility of an entire industrial or manufacturing process and allow operators to intervene.
OT devices work together directly or hierarchically within an ICS or other OT system. In a water treatment plant, automated control systems like pumps and valves control water flow through treatment stages. They respond to signals sent by human machine interfaces (HMIs) that monitor water levels and pressure as it moves through each stage. Meanwhile, sensors continuously monitor water quality and process parameters, sending data to PLCs and distributed control systems (DCSs). These systems analyze the data, make decisions based on pre-programmed logic and control equipment to ensure water meets quality standards.
Common OT systems include SCADA systems, DCSs, manufacturing execution systems (MES) and safety instrument systems (SIS).
SCADA systems provide real-time monitoring, control and visibility of an entire industrial or manufacturing process, either locally from a central control room in a plant or remotely across facilities. They collect and store data such as quality measurements, flow rates and chemical levels from ICS components such as PLCs, RTUs and HMIs. They visualize and alert on this information and enable operators to start, stop or alter a process manually, if necessary.
DCSs integrate data from multiple PLCs and subsystems across a plant or facility for centralized control and monitoring to optimize overall performance. In a petrochemical refinery, a DCS manages various processes like distillation and blending to ensure efficient operation and product quality.
An MES acts as the central nervous system of the manufacturing operation. It receives orders from an enterprise resource planning (ERP) system regarding what needs to be produced and then schedules production tasks, manages inventory levels and tracks the progress of production batches in real time.
A SIS is a combination of sensors, logic solvers and control elements within industrial machinery designed to shut down equipment when it detects dangerous conditions.
In addition to pumps, valves, robots and switches, common OT devices found in industrial and other physical control systems include PLCs, RTUs, data historians and HMIs.
PLCs are rugged industrial computers that execute control functions based on programmed logic. They receive input signals from sensors (often from an MES) telling them to do something (such as start/stop a process or adjust a parameter) and then output the right commands to control machinery, such as pumps and valves in a water treatment plant, or a process, such as robotic welding on an assembly line.
Data historians (also called process historians or data loggers) are databases that collect and store data generated by ICS assets. They are typically high-performance databases that can process and store high volumes of real-time data.
HMIs are interfaces that allow operators to interact with PLCs and DCSs through graphical displays and touchscreens. Operators use HMIs to monitor processes and equipment status, respond to alerts, and adjust parameters as needed to ensure safe and efficient operation.
RTUs are like PLCs but are typically used in remote or distributed locations where PLCs and wired connections are impractical, like a sterile manufacturing area or oil field. They collect data from sensors and equipment and transmit it back to the MES or SCADA system for analysis and control. In a water distribution network, RTUs monitor water levels in storage tanks and regulate pump operations to maintain consistent water pressure across the distribution system.
Also referred to as industrial control systems (ICS), cyber-physical systems
Based on parameters set by people, control systems are automated to work together seamlessly with human intervention needed only when an alert signals that something is awry. Most often OT is found in industrial environments, including critical infrastructure sectors like manufacturing, energy, transportation, water and wastewater, and oil and gas. However, things like HVAC systems, escalators and elevators are also considered OT.
It refers to specialized computer systems used to control and monitor industrial processes. They are typically mission-critical and require high availability. Anything tangential to the process, such as the software embedded in equipment or added for control, management and monitoring would be considered OT but not ICS.
An ICS may operate autonomously, but more often its components retrieve real-time data from factory, rail system, pipeline or other industrial process that enables operators to make informed decisions and keep systems running smoothly. Key ICS components include programmable logic controllers (PLCs) used to control the robotic arms that weld car frames together on an assembly line, remote terminal units (RTUs) that regulate stoplights to optimize traffic flow, or a distributed control system (DCS) controlling the refining process in oil refinery.
ICSs function either as a continuous process control system managed by programmable logic controllers (PLCs), or as a discrete process control system (DPC), which may rely on a PLC or other batch process control device.
In turn, nearly all ICSs roll up to a supervisory control and data acquisition (SCADA) system, which provides real-time monitoring, control and visibility of an entire industrial or manufacturing process and allow operators to intervene.
OT devices work together directly or hierarchically within an ICS or other OT system. In a water treatment plant, automated control systems like pumps and valves control water flow through treatment stages. They respond to signals sent by human machine interfaces (HMIs) that monitor water levels and pressure as it moves through each stage. Meanwhile, sensors continuously monitor water quality and process parameters, sending data to PLCs and distributed control systems (DCSs). These systems analyze the data, make decisions based on pre-programmed logic and control equipment to ensure water meets quality standards.
Common OT systems include SCADA systems, DCSs, manufacturing execution systems (MES) and safety instrument systems (SIS).
SCADA systems provide real-time monitoring, control and visibility of an entire industrial or manufacturing process, either locally from a central control room in a plant or remotely across facilities. They collect and store data such as quality measurements, flow rates and chemical levels from ICS components such as PLCs, RTUs and HMIs. They visualize and alert on this information and enable operators to start, stop or alter a process manually, if necessary.
DCSs integrate data from multiple PLCs and subsystems across a plant or facility for centralized control and monitoring to optimize overall performance. In a petrochemical refinery, a DCS manages various processes like distillation and blending to ensure efficient operation and product quality.
An MES acts as the central nervous system of the manufacturing operation. It receives orders from an enterprise resource planning (ERP) system regarding what needs to be produced and then schedules production tasks, manages inventory levels and tracks the progress of production batches in real time.
A SIS is a combination of sensors, logic solvers and control elements within industrial machinery designed to shut down equipment when it detects dangerous conditions.
In addition to pumps, valves, robots and switches, common OT devices found in industrial and other physical control systems include PLCs, RTUs, data historians and HMIs.
PLCs are rugged industrial computers that execute control functions based on programmed logic. They receive input signals from sensors (often from an MES) telling them to do something (such as start/stop a process or adjust a parameter) and then output the right commands to control machinery, such as pumps and valves in a water treatment plant, or a process, such as robotic welding on an assembly line.
Data historians (also called process historians or data loggers) are databases that collect and store data generated by ICS assets. They are typically high-performance databases that can process and store high volumes of real-time data.
HMIs are interfaces that allow operators to interact with PLCs and DCSs through graphical displays and touchscreens. Operators use HMIs to monitor processes and equipment status, respond to alerts, and adjust parameters as needed to ensure safe and efficient operation.
RTUs are like PLCs but are typically used in remote or distributed locations where PLCs and wired connections are impractical, like a sterile manufacturing area or oil field. They collect data from sensors and equipment and transmit it back to the MES or SCADA system for analysis and control. In a water distribution network, RTUs monitor water levels in storage tanks and regulate pump operations to maintain consistent water pressure across the distribution system.
