AiVibeOT & Industrial Cybersecurity
Security of operational technology and industrial control systems: IEC 62443, the Purdue model, segmentation, secure remote access, OT asset and patch management, device integrity and notable ICS attacks.
Where AiVibe comes in
In AiVibe's AiAmbA AI Factory, the AiAmbA IoT edge layer keeps writes to machines deny-by-default and AI agents only propose changes that a trained operator confirms. AiVibe's security services include vulnerability assessment and penetration testing, and AiVibe is ISO/IEC 27001:2022 certified.
40 terms
- Air GapAn air gap is the physical isolation of a computer or network from other networks, especially the internet and corporate IT, so that data…
- Application AllowlistingApplication allowlisting is a security control that allows only explicitly approved software to execute on a system and blocks everything…
- Controller Write ProtectionController write protection covers the features and practices that stop unauthorised changes to PLC and controller logic, configuration…
- Data Diode (Unidirectional Gateway)A data diode, or unidirectional gateway, is a hardware-enforced network device that lets data flow in only one direction, typically from a…
- Defence in DepthDefence in depth is a security strategy that protects industrial and IT systems with multiple independent layers of controls, so that the…
- Deny-by-Default ControlDeny-by-default is a security principle in which every connection, command or action is blocked unless explicitly permitted, widely…
- Engineering Workstation SecurityEngineering workstation security is the protection of the computers used to program and configure PLCs, controllers and HMIs, which are…
- Firmware SigningFirmware signing uses digital signatures so that industrial and embedded devices can verify that a firmware update comes from the genuine…
- Hardware Root of TrustA hardware root of trust is a tamper-resistant component, such as boot ROM, a secure element or a Trusted Platform Module, that anchors a…
- IEC 62443 (ISA/IEC 62443)IEC 62443 (ISA/IEC 62443) is a series of international standards that defines cybersecurity requirements for industrial automation and…
- IEC 62443 Foundational Requirements (FR)The IEC 62443 foundational requirements are seven categories that structure all technical security requirements for industrial control…
- IEC 62443 Security Levels (SL)IEC 62443 security levels (SL 1 to SL 4) describe how strongly a zone, conduit, system or component resists attack, from casual violation…
- IEC 62443-3-2 Security Risk AssessmentIEC 62443-3-2 is the part of the IEC 62443 series that defines how to assess cybersecurity risk for an industrial control system and use…
- IEC 62443-3-3 System Security RequirementsIEC 62443-3-3 specifies the technical security requirements an industrial automation and control system must meet for each security level…
- IEC 62443-4-1 Secure Product Development LifecycleIEC 62443-4-1 specifies secure product development lifecycle requirements for suppliers of industrial automation and control products…
- IEC 62443-4-2 Component Security RequirementsIEC 62443-4-2 defines the technical security capabilities that individual industrial automation and control components, such as…
- Industrial Automation and Control System (IACS)An industrial automation and control system (IACS) is the IEC 62443 term for the people, hardware, software and policies involved in…
- Industrial DMZ (IDMZ)An industrial DMZ (IDMZ) is a buffer network between enterprise IT and the plant control network, often called Purdue Level 3.5, where…
- Industrial FirewallAn industrial firewall is a firewall built for OT networks that filters traffic between control system zones and can inspect industrial…
- Industrial Protocol SecurityIndustrial protocol security covers the risks and protections of control system protocols such as Modbus, DNP3 and S7comm, many of which…
- Industroyer (CrashOverride)Industroyer, also called CrashOverride, is malware designed to attack electrical substations by speaking grid control protocols directly…
- ISASecure CertificationISASecure is a certification programme of the ISA Security Compliance Institute that independently certifies industrial automation…
- IT vs OT SecurityIT vs OT security describes how protecting business information systems differs from protecting industrial control systems, where safety…
- MITRE ATT&CK for ICSMITRE ATT&CK for ICS is a freely available knowledge base of the tactics and techniques that adversaries use against industrial control…
- NERC CIP StandardsNERC CIP is the set of mandatory Critical Infrastructure Protection standards from the North American Electric Reliability Corporation…
- NIST SP 800-82NIST SP 800-82, Guide to Operational Technology (OT) Security, is a freely available US NIST publication that explains how to secure…
- Operational Technology (OT) SecurityOperational technology (OT) security is the protection of systems that monitor and control physical processes, such as PLCs, DCS, SCADA…
- OT Asset InventoryAn OT asset inventory is a maintained record of the controllers, workstations, network devices, software and firmware in an industrial…
- OT Incident ResponseOT incident response is the process of preparing for, detecting, containing and recovering from cybersecurity incidents in industrial…
- OT Network MonitoringOT network monitoring is the continuous, usually passive, analysis of industrial network traffic to identify assets, learn normal…
- OT Network SegmentationOT network segmentation divides industrial networks into separate zones with tightly controlled traffic between them, limiting how far…
- OT Patch ManagementOT patch management is the risk-based process of evaluating, testing and installing security updates on industrial control systems…
- Purdue ModelThe Purdue model is a hierarchical reference architecture that divides industrial systems into levels, from the physical process and…
- Removable Media ControlRemovable media control is the set of policies and technical measures that restrict and check USB drives, external disks and other…
- Safety and Security InterplayThe safety and security interplay is the interdependence of functional safety and cybersecurity in industrial systems, where attacks can…
- Secure BootSecure boot is a start-up process in which a device verifies the digital signature of each boot stage, from bootloader to firmware or…
- Secure Remote Access for OTSecure remote access for OT is the controlled way of letting engineers and vendors reach industrial systems from outside the plant, using…
- StuxnetStuxnet is a computer worm, publicly identified in 2010, that sabotaged industrial processes by reprogramming Siemens PLCs while hiding…
- TRITON (TRISIS) MalwareTRITON, also known as TRISIS, is malware discovered in 2017 that targeted Triconex safety instrumented system controllers at an industrial…
- Zones and ConduitsZones and conduits are the IEC 62443 approach to network architecture, grouping assets with common security requirements into zones and…
Other topics
- AI & Machine LearningMachine learning and deep learning fundamentals, LLMs and generative AI, RAG, AI agents and their protocols…
- Cloud & AI InfrastructureCloud computing and AI infrastructure terms: service models, containers and Kubernetes, DevOps and SRE practice, data…
- CNC & Precision MachiningCNC machine tools and machining practice: axes, spindles, feeds and speeds, G-code, offsets, CAM, tooling and tool…
- Cybersecurity & ComplianceApplication and enterprise security, from vulnerability classes and security testing to detection, response, identity…
- Industrial IoT & EdgeIndustrial IoT architecture and edge computing: OPC UA and MQTT, unified namespace, gateways and protocol translation…
- Industry 4.0 & Manufacturing OperationsIndustry 4.0 and smart factory concepts, OEE and production losses, lean methods, Six Sigma and statistical process…
- PLC & Industrial ControlProgrammable controllers and IEC 61131-3 programming, I/O, HMI, SCADA and DCS, PID and motion control, functional…
- Quality, Reliability & MaintenanceMaintenance strategies, reliability metrics and analysis, condition monitoring techniques, maintenance management…
- Robotics & Physical AIIndustrial and collaborative robots, kinematics, programming and simulation, grippers, machine vision, mobile robots…
- Textile & Automotive ManufacturingTextile production from spinning, weaving and knitting to dyeing and finishing, and automotive and EV production from…