Unified Approach to Cyber-Physical System Protection

This white paper discusses the relationship between Information Technology (IT), Operational Technology (OT), and Cyber-Physical Systems (CPS), emphasizing the need for a unified security strategy. It defines IT and OT, highlighting their distinct security priorities, with IT focusing on confidentiality and OT prioritizing availability. The paper outlines the vulnerabilities present in traditional OT systems and recent cyber-attack incidents affecting sectors such as manufacturing and water supply. It details how cyber threats exploit the integration of IT and OT networks, emphasizing the importance of asset visibility and unified management for CPS protection. Additionally, the paper introduces the Purdue model as a framework for understanding the architecture of CPS, which segments various operational levels from physical devices to enterprise networks. The paper concludes by stressing the necessity of adapting security measures to address the complexities of CPS threats, ensuring the safety and operational continuity of critical infrastructures.