Humanity has been through a number of industrial revolutions since the 1760s, and is now at its fourth cycle of sweeping industrial innovation, known as Industry 4.0. It is characterized by the ongoing automation of traditional manufacturing and industrial practices using modern smart technology. As such, it inherits risks and threats that apply to connected environments in new ways.
Put yourself in the following scenario. You’re a security analyst in a manufacturing company. Some of your equipment is connected to smart devices and controls, while other parts of the plant are not. You have just discovered an attacker has breached the part of your factory that produces chemicals, infecting dated Windows 7 operating systems on key production assets.
The affected Windows system is part of a human-machine interface (HMI) that enables operators to more easily control processes and settings on chemical reactors and mixing tanks. With malware on your production assets, the tank of chemicals begins to overheat, emitting light smoke. A warning light goes off in the control room as the reaction spins out of control. Control room operators frantically phone orders down to the plant…
