A Tale Of Two (Very Different) Secure ICS Architectures

Alexandrine Torrents, on the S4x22 Main Stage, presents two very different ICS architectures (traditional power plants and distributed energy resources) that can and do exist in a single company. Alexandrine then looks at the security requirements and architecture for each. They are very different.

[@violent_bebop9687]

Now this is a presentation to watch, :)

[@jksalamon]

Informative video. Purdue model is purely for reference, then and now too, its not a one size fits all, thats something many forget while thinking about architecting ICS architectures. Also it mainly highlighted the need for securing the control system as in a minimum set of best practices. For todays requirements, we have to architect networks that is simple and meets our requirements. No point in having a very complex network which can have far reaching consequences. Also the debate on MPLS vs. SD-WAN will never end, to be honest, it depends upon the needs, data traffic and budget. Also vendor solutions for SD-WAN vary, but its a matter of time, everyone will start shifting to SD-WAN for various reasons.

[@pbleep]

Agree re Purdue, its now modified to move the ownership of the new level 4/5 into the OT domain but with no IT assets in the new 4/5

[@MoulayAbdsamadBelghiti]

First I like ... then I watch ... French 🇫🇷 oblige :D

[@MoulayAbdsamadBelghiti]

Well.. after watching the video a couple of points:
- Purdue is dead, vive Purdue!
There is a slight move up in the abstract/concrete ladder but it is essentially the same thing; and it makes sense.
- Second, this goes along the lines of software-defined-x changes/moves; here again it makes sense;
- Third, last but not least and please don't excuse my French nor my chauvinism, this is where the French are best at: logic - you English people are best at process. Can't match.
PS: no hard feelings, I can relate too as an Arab :D
Seriously: thank you, it was very instructive...