TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour. A COMPREHENSIVE GUIDE TO OT/ICS ASSET MANAGEMENT In this article, we will only use OT and trust that the reader understands that ICS is covered as well. An OT asset is a digital device that is part of an OT infrastructure. Devices can either be physical or virtualized. One can argue that there are other types OT/ICS SECURITY POLICY TEMPLATES THAT WILL SAVE YOU MAN OT/ICS policy templates that will save you time, labor, and project risk. You can have an OT/ICS cyber security program custom-built by consultants in a never ending series of workshops. Or you can license a comprehensive, proven, ready-made program for a fraction of the cost and go right to implementation. Most OT policy sets are little more ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour. A COMPREHENSIVE GUIDE TO OT/ICS ASSET MANAGEMENT In this article, we will only use OT and trust that the reader understands that ICS is covered as well. An OT asset is a digital device that is part of an OT infrastructure. Devices can either be physical or virtualized. One can argue that there are other types OT/ICS SECURITY POLICY TEMPLATES THAT WILL SAVE YOU MAN OT/ICS policy templates that will save you time, labor, and project risk. You can have an OT/ICS cyber security program custom-built by consultants in a never ending series of workshops. Or you can license a comprehensive, proven, ready-made program for a fraction of the cost and go right to implementation. Most OT policy sets are little more ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

LEAN OT SECURITY

About the Author. Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and other industrial plants. WHAT IS OT/ICS ASSET MANAGEMENT? Asset inventory. For practical purposes, the best way to define an OT asset is a digital OT device, such as a PLC, RTU, sensor, actuator, network switch, operator panel, and so forth. An asset inventory, which is the centerpiece of asset management, stores all the data that is available for OT assets. This data includes: Hardware make and

model.

ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

STUXNET ANALYSIS BY LANGNER, BASED ON REVERSE ENGINEERING Stuxnet analysis by Langner. Our Stuxnet analysis is considered a milestone in cyber forensics. Here is the one-stop place where you can access our most consequential material. In the summer of 2010, a malware of unprecedented complexity made the news. It used multiple zero-day exploits, and was dubbed “Stuxnet” by anti-virus

companies.

PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: UNDERSTANDING OT/ICS ASSET DISCOVERY: PASSIVE VS. ACTIVE Passive Scanning. The first generation of OT asset discovery products tries to crack the nut by what is usually called Passive Scanning. In this category we find vendors such as Claroty, Nozomi, SecurityMatters, and about 25 others. The term passive scanning is a bit technically incorrect as no network scanning takes place. VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import RETRIEVING HARDWARE PRODUCT DATA USING THE REST API Hardware product data can be retrieved using the hardware resource.It allows you to: retrieve all hardware product data (full hardware product catalog) retrieve hardware product data for all products of a

particular vendor

TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour. OT/ICS SECURITY POLICY TEMPLATES THAT WILL SAVE YOU MAN OT/ICS policy templates that will save you time, labor, and project risk. You can have an OT/ICS cyber security program custom-built by consultants in a never ending series of workshops. Or you can license a comprehensive, proven, ready-made program for a fraction of the cost and go right to implementation. Most OT policy sets are little more OT-BASE: AUTOMATIC OT ASSET MANAGEMENT SOFTWARE OT-BASE enables Control Engineers managing thousands of OT devices in multiple facilities to document and manage OT assets. The platform automatically collects OT configuration details and makes them available at your fingertips no matter where you are. Allow coworkers, contractors, and OEMs to understand system details without having to

come

STUXNET ANALYSIS BY LANGNER, BASED ON REVERSE ENGINEERING Stuxnet analysis by Langner. Our Stuxnet analysis is considered a milestone in cyber forensics. Here is the one-stop place where you can access our most consequential material. In the summer of 2010, a malware of unprecedented complexity made the news. It used multiple zero-day exploits, and was dubbed “Stuxnet” by anti-virus

companies.

TO KILL A CENTRIFUGE Which is what Stuxnet did. Normal operating speed of the IR-1 centrifuge is 63,000 rpm, as disclosed by A. Q. Khan himself in his 2004 confession. Stuxnet increases that speed by a good one-third to 84,600 rpm for fifteen minutes, including the acceleration phase which will likely take several minutes. HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the TO KILL A CENTRIFUGE To Kill a Centrifuge - 4 - www.langner.com Prologue: A Textbook Example of Cyber Warfare Even three years after being discovered, Stuxnet continues to baffle military strategists, computer VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour. OT/ICS SECURITY POLICY TEMPLATES THAT WILL SAVE YOU MAN OT/ICS policy templates that will save you time, labor, and project risk. You can have an OT/ICS cyber security program custom-built by consultants in a never ending series of workshops. Or you can license a comprehensive, proven, ready-made program for a fraction of the cost and go right to implementation. Most OT policy sets are little more OT-BASE: AUTOMATIC OT ASSET MANAGEMENT SOFTWARE OT-BASE enables Control Engineers managing thousands of OT devices in multiple facilities to document and manage OT assets. The platform automatically collects OT configuration details and makes them available at your fingertips no matter where you are. Allow coworkers, contractors, and OEMs to understand system details without having to

come

STUXNET ANALYSIS BY LANGNER, BASED ON REVERSE ENGINEERING Stuxnet analysis by Langner. Our Stuxnet analysis is considered a milestone in cyber forensics. Here is the one-stop place where you can access our most consequential material. In the summer of 2010, a malware of unprecedented complexity made the news. It used multiple zero-day exploits, and was dubbed “Stuxnet” by anti-virus

companies.

TO KILL A CENTRIFUGE Which is what Stuxnet did. Normal operating speed of the IR-1 centrifuge is 63,000 rpm, as disclosed by A. Q. Khan himself in his 2004 confession. Stuxnet increases that speed by a good one-third to 84,600 rpm for fifteen minutes, including the acceleration phase which will likely take several minutes. HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the TO KILL A CENTRIFUGE To Kill a Centrifuge - 4 - www.langner.com Prologue: A Textbook Example of Cyber Warfare Even three years after being discovered, Stuxnet continues to baffle military strategists, computer VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import OT/ICS SECURITY POLICY TEMPLATES THAT WILL SAVE YOU MAN OT/ICS policy templates that will save you time, labor, and project risk. You can have an OT/ICS cyber security program custom-built by consultants in a never ending series of workshops. Or you can license a comprehensive, proven, ready-made program for a fraction of the cost and go right to implementation. Most OT policy sets are little more

LEAN OT SECURITY

About the Author. Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and other industrial plants. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

THE STUXNET STORY

The following text is a transcript from the video with the same title: In 2007, an unidentified person submitted a code sample to the collaborative anti-virus platform Virustotal. Not recognized by any anti-virus company at the time, that code was the first true ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. ACTIVE OT/ICS ASSET DISCOVERY SOFTWARE On this page you can download the evaluation version of OT-BASE Asset Discovery if you are an OT asset owner or a consulting firm. OT-BASE Asset Discovery automatically discovers the identity and configuration of your computers, network switches, PLCs, operator stations, RTUs, etc. Using OT-BASE Asset Discovery for evaluation purposes in order to assess the suitability of the product for your UNDERSTANDING OT/ICS ASSET DISCOVERY: PASSIVE VS. ACTIVE Passive Scanning. The first generation of OT asset discovery products tries to crack the nut by what is usually called Passive Scanning. In this category we find vendors such as Claroty, Nozomi, SecurityMatters, and about 25 others. The term passive scanning is a bit technically incorrect as no network scanning takes place. PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: TO KILL A CENTRIFUGE To Kill a Centrifuge - 4 - www.langner.com Prologue: A Textbook Example of Cyber Warfare Even three years after being discovered, Stuxnet continues to baffle military strategists, computer VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: MISJUDGING OT SECURITY RISK: THE CASE OF "ACTIVE" VSSEE MORE ON

LANGNER.COM

RETRIEVING HARDWARE PRODUCT DATA USING THE REST API Hardware product data can be retrieved using the hardware resource.It allows you to: retrieve all hardware product data (full hardware product catalog) retrieve hardware product data for all products of a

particular vendor

TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERY Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: MISJUDGING OT SECURITY RISK: THE CASE OF "ACTIVE" VSSEE MORE ON

LANGNER.COM

RETRIEVING HARDWARE PRODUCT DATA USING THE REST API Hardware product data can be retrieved using the hardware resource.It allows you to: retrieve all hardware product data (full hardware product catalog) retrieve hardware product data for all products of a

particular vendor

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

LEAN OT SECURITY

A lean OT security approach is built on the recognition that, in order to be effective, a solution must be able to deliver efficiency in addition to security. Inside this whitepaper, you’ll learn: The hidden problems with traditional OT security approaches. The paradigm-shifting definition of lean OT security. STUXNET ANALYSIS BY LANGNER, BASED ON REVERSE ENGINEERING Stuxnet analysis by Langner. Our Stuxnet analysis is considered a milestone in cyber forensics. Here is the one-stop place where you can access our most consequential material. In the summer of 2010, a malware of unprecedented complexity made the news. It used multiple zero-day exploits, and was dubbed “Stuxnet” by anti-virus

companies.

ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. ACTIVE OT/ICS ASSET DISCOVERY SOFTWARE On this page you can download the evaluation version of OT-BASE Asset Discovery if you are an OT asset owner or a consulting firm. OT-BASE Asset Discovery automatically discovers the identity and configuration of your computers, network switches, PLCs, operator stations, RTUs, etc. Using OT-BASE Asset Discovery for evaluation purposes in order to assess the suitability of the product for your TO KILL A CENTRIFUGE Which is what Stuxnet did. Normal operating speed of the IR-1 centrifuge is 63,000 rpm, as disclosed by A. Q. Khan himself in his 2004 confession. Stuxnet increases that speed by a good one-third to 84,600 rpm for fifteen minutes, including the acceleration phase which will likely take several minutes. OT/ICS VULNERABILITY MANAGEMENT BY THE STUXNET TEAM Get up to speed on OT vulnerability management in an hour. The following videos will help you understand OT vulnerability management in no time. What is OT/ICS vulnerability management? Explained in 15 minutes! If playback doesn't begin shortly, try restarting your

device.

OT-BASE HELP CENTER

OT-BASE Asset Discovery. The decentral asset discovery component that automatically discovers device identities and configuration details. OT-BASE Asset Center for Admins VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERYASSET MANAGEMENT SOFTWAREASSET MANAGEMENT SOFTWARE REVIEWSEQUIPMENT ASSET MANAGEMENT SOFTWAREIT ASSET MANAGEMENT SOFTWARE OPEN SOURCEBEST IT ASSET MANAGEMENT TOOLFREE SOFTWARE ASSET MANAGEMENT TOOL Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: MISJUDGING OT SECURITY RISK: THE CASE OF "ACTIVE" VSSEE MORE ON

LANGNER.COM

RETRIEVING HARDWARE PRODUCT DATA USING THE REST API Hardware product data can be retrieved using the hardware resource.It allows you to: retrieve all hardware product data (full hardware product catalog) retrieve hardware product data for all products of a

particular vendor

TOOLS TO MANAGE THE DIGITAL TRANSFORMATION OF OT/ICS No matter if you are on the factory floor or at the home office — the OT-BASE OT Asset Management software gives you an accurate representation of what’s going on in your critical OT infrastructure. The new normal is here to stay. We help you deal with it. You can’t control an expanding digital OT infrastructure with

Excel tables while

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. OT/ICS ASSET MANAGEMENT SOFTWARE USING ACTIVE DISCOVERYASSET MANAGEMENT SOFTWAREASSET MANAGEMENT SOFTWARE REVIEWSEQUIPMENT ASSET MANAGEMENT SOFTWAREIT ASSET MANAGEMENT SOFTWARE OPEN SOURCEBEST IT ASSET MANAGEMENT TOOLFREE SOFTWARE ASSET MANAGEMENT TOOL Download the free OT-BASE Asset Discovery evaluation software. Asset Discovery is only a small part of OT-BASE, but it allows you to validate our discovery accuracy. Check it out in your testbed, in your office network, and in selected process networks. You will see results within the first hour.

THE STUXNET STORY

USING ELASTICSEARCH AS AN OT/ICS ASSET INVENTORY, READY TO Elasticsearch can index all kinds of complex documents, so you may wonder if it can also be used as an asset inventory. The simple answer is: Yes, certainly. In this article we’ll explain how you can replicate an inventory maintained in the OT-BASE Asset Management Platform. in Elasticsearch, in order to take advantage of the search and visualization functions that Elastic offers. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

HOW THE FLORIDA WATER HACK SHOWS EVERYTHING WRONG WITH OT How the Florida water hack shows everything wrong with OT security. Feb 14, 2021. The Florida water hack gives you a good idea of what OT security reality looks like — and it’s in stark contrast to the Kabuki theater performed by OT security vendors, the media, and the PROGRAM START, LOGON, AND ADDING NODES Adding nodes as a file. Node data is automatically saved in a text file in the CSV (comma-separated values) format. This file is stored in C:\ProgramData\Langner\OT-BASE Discovery Manager\ot-base-discovery-manager.txt. If you prefer, you can input node data in this file, rather than in Discovery Manager's user interface. The format is as follows: MISJUDGING OT SECURITY RISK: THE CASE OF "ACTIVE" VSSEE MORE ON

LANGNER.COM

RETRIEVING HARDWARE PRODUCT DATA USING THE REST API Hardware product data can be retrieved using the hardware resource.It allows you to: retrieve all hardware product data (full hardware product catalog) retrieve hardware product data for all products of a

particular vendor

ABOUT LANGNER: OT/ICS SECURITY BY THE GUYS WHO CRACKED STUXNET Ralph Langner founded the German branch of the Langner group in 1988, and the US-based Langner Inc. in 2017. Ralph accumulated 25 years of hands-on field experience in the cyber security issues of power plants, water treatment facilities, nuclear facilities, food and beverage plants, automotive factories, steel mills, and many more. USE SPLUNK FOR OT/ICS SECURITY Use Splunk for OT/ICS security. The OT-BASE Technical Add-on gives you instant visibility of your OT assets in Splunk. Use existing search queries, dashboards and workflows for OT devices and software. The OT-BASE Add-on is CIM compatible and integrated with Splunk Enterprise

Security.

LEAN OT SECURITY

A lean OT security approach is built on the recognition that, in order to be effective, a solution must be able to deliver efficiency in addition to security. Inside this whitepaper, you’ll learn: The hidden problems with traditional OT security approaches. The paradigm-shifting definition of lean OT security. STUXNET ANALYSIS BY LANGNER, BASED ON REVERSE ENGINEERING Stuxnet analysis by Langner. Our Stuxnet analysis is considered a milestone in cyber forensics. Here is the one-stop place where you can access our most consequential material. In the summer of 2010, a malware of unprecedented complexity made the news. It used multiple zero-day exploits, and was dubbed “Stuxnet” by anti-virus

companies.

ACTIVE OT/ICS ASSET DISCOVERY THAT SCALES active. OT/ICS asset discovery that scales. Beyond passive sniffing: Identify, inventory, and manage your digital OT/ICS assets without installing a ton of network appliances. The first generation of ICS detection products relied on “passive sniffing” to infer asset identity and configuration. ACTIVE OT/ICS ASSET DISCOVERY SOFTWARE On this page you can download the evaluation version of OT-BASE Asset Discovery if you are an OT asset owner or a consulting firm. OT-BASE Asset Discovery automatically discovers the identity and configuration of your computers, network switches, PLCs, operator stations, RTUs, etc. Using OT-BASE Asset Discovery for evaluation purposes in order to assess the suitability of the product for your TO KILL A CENTRIFUGE Which is what Stuxnet did. Normal operating speed of the IR-1 centrifuge is 63,000 rpm, as disclosed by A. Q. Khan himself in his 2004 confession. Stuxnet increases that speed by a good one-third to 84,600 rpm for fifteen minutes, including the acceleration phase which will likely take several minutes. OT/ICS VULNERABILITY MANAGEMENT BY THE STUXNET TEAM Get up to speed on OT vulnerability management in an hour. The following videos will help you understand OT vulnerability management in no time. What is OT/ICS vulnerability management? Explained in 15 minutes! If playback doesn't begin shortly, try restarting your

device.

OT-BASE HELP CENTER

OT-BASE Asset Discovery. The decentral asset discovery component that automatically discovers device identities and configuration details. OT-BASE Asset Center for Admins VULNERABILITY MANAGEMENT Vulnerability management. OT-BASE includes various options for vulnerability management, the most important of which are explained in this article. Note that for the following discussion it is assumed that Asset Center is configured properly to automatically import

* Products

* OT-BASE OT/ICS Asset Management Software * The Simple Cyber Governance Program (SCGP)

* Downloads

* OT-BASE Asset Discovery Evaluation

* SCGP Evaluation

* Resources

* Blog

* Company

* About

* Careers

* Support

* Contact

*

*

Select Page

* Products

* OT-BASE OT/ICS Asset Management Software * The Simple Cyber Governance Program (SCGP)

* Downloads

* OT-BASE Asset Discovery Evaluation

* SCGP Evaluation

* Resources

* Blog

* Company

* About

* Careers

* Support

* Contact

*

*

OT/ICS SECURITY STARTS AND ENDS WITH CONTROL ENGINEERS The heavy lifting in OT security is not accomplished by the Security Operations Center. It rests on the shoulders of overworked control engineers — the people who are responsible for reliable and safe operation of the organization’s OT infrastructure. We help them

succeed.

OT ASSET MANAGEMENT

OT asset management software for large organizations, integrated with enterprise IT, including vulnerability management

Learn more >

OT GOVERNANCE

Proven, ready-made policies to make your OT infrastructure cyber-secure and compliant

Learn more >

YOU ARE THE EXPERT, WE PROVIDE THE DATA. You are not an expert because you happen to be the only one in the company who knows how a particular RTU is configured. You are an expert because you know how to design, build, and fix, your company’s vital OT infrastructure. We elevate your capabilities to a higher level by relieving you from wasting time on retrieving trivial configuration details and dependencies that used to be undocumented and difficult to access. We enable you to see beyond isolated device data at a micro level. We let you search, analyze, visualize, and share system-wide and fleet-wide data. We let you work the big picture for installations with five and six digit device numbers. Forget Excel and “ICS Detection” products. A genuine OT asset management system is something completely different. It’s not about threats, it’s about efficiency. WHAT IS OT ASSET DISCOVERY? Check out the different technologies available for building an OT asset inventory, and how to start using them today WHAT IS OT ASSET MANAGEMENT? Learn what OT asset management is, how it works, which use cases it covers, and what it can do for you WHY YOU NEED AN OT ASSET INVENTORY Need to convince others why an OT asset inventory is a must have? Here

are some arguments.

REPLACE DRAMA WITH DATA. Are you are getting bombarded with doomsday scenarios, touting an alleged ever increasing OT security risk? Fact is, you can’t build a rational OT security strategy on manufactured drama. When you are held accountable for results, it’s time to replace drama with data, and fear with facts. Check out the OT-BASE OT Asset Management System >

* Products

* OT-BASE OT/ICS Asset Management Software * The Simple Cyber Governance Program (SCGP)

* Downloads

* OT-BASE Asset Discovery Evaluation

* SCGP Evaluation

* Resources

* Blog

* Company

* Contact

* Imprint

* Privacy