Digital Transformation and Today’s Industrial Networks
In February 2021, an unidentified intruder gained access to the network systems of a US water treatment plant in Oldsmar, Florida, and briefly altered the chemical levels in the drinking water. Fortunately, an employee noticed the intrusion attempt and blocked it immediately. This incident sparked many discussions on the topic of cybersecurity in operational technology (OT) environments within the media and the industrial sector.
By adapting to the digital transformation, OT network infrastructure starts growing in scale and becomes increasingly complex and interconnected. A single point of failure could bring tremendous harm to the whole networking system. Therefore, ensuring maximum network uptime is critical to keep business going smoothly. Remote network management is becoming an invaluable tool for handling emergencies quickly and efficiently. However, there are multiple obstacles hampering the use of remote services, with cybersecurity being the biggest concern. Nowadays, cyberattacks are a common occurrence. Without cybersecurity, the door is set wide open for malicious individuals to take advantage of vulnerable networks. Looking back at the Florida water treatment facility case, the FBI assessed that the intruder likely accessed the facility’s systems by exploiting cybersecurity weaknesses including poor password security and the lack of firewall protection when logging in to the plant’s systems remotely, as well as using unsafe remote access software.
Pay Special Attention to OT Requirements
Considering the requirements of secure remote network management, everyone is looking for a solution that could help simplify daily operations without having to worry about cybersecurity. While there are many pieces of software available designed for remote access or network management, they often cater to IT networks and are rarely part of larger, consolidated solutions. However, OT and IT networks have different characteristics and priorities. While IT prioritizes data confidentiality, OT focuses on network availability and zero tolerance for downtime. This difference in approach makes it difficult for OT networks to adopt IT practices. Another hurdle is that many automation engineers are not familiar with VPNs or know the public IP necessary for setting up remote access.
Convenient and Secure Remote Maintenance in Practice
For OT engineers, cybersecurity remains the number one concern. A solution with flexible access control could fulfill different OT scenarios and enhance network security. For example, customizable access control lets facility owners decide when and for how long third-party engineers can access their network. Furthermore, access can be restricted to specific network areas. These measures can ensure the safety of their network when opening the door for remote maintenance services. Remote services for OT should also be accessible and easy to use. An ideal solution lets OT engineers easily set up remote access when needed, even if they are not familiar with VPNs or know the public IP.