INSPIRA
OT Security
In recent years, the Industrial Control Systems (ICS)
upon which much of our critical infrastructure and
manufacturing industry depends, have come under
increasingly frequent and sophisticated cyber-attacks.
This is a consequence of the inevitable convergence
of Operational Technology (OT) with Information
Technology (IT). As in all spheres of computing, the
advantages of increased network connectivity
through open standards such as Ethernet and TCP/IP,
CHANGE DRIVERS & THREAT LANDSCAPE
With big-data analytics, the industries have recognized
that sharing and leveraging the data from ICS/OT helps
business to increase productivity, reduce operation
cost, improve an organizations proactive maintenance
support model, address the skills shortage problems,
VULNERABILITIES
Due to their unique history and conception, separate
from the evolving world of IT, ICS present a number of
unique challenges:
Inherent lack of security
The “air-gap” fallacy: The superficially seductive
idea of creating an “air-gap” between the ICS
and all other networks is no longer realistic
Use of embedded software written with scant
adherence to the security techniques
Insufficient regulation of component manufacture
and supply chain
Poor network segmentation
Infrequent updates and patching
inspiraenterprise.com
as well as the cost savings derived from replacing
dedicated proprietary equipment with off-the-shelf
hardware and software, come at the cost of
increased vulnerability.
ICS have recently become attractive targets for
terrorism and STATE SPONSORED cyber-warfare with
very sophisticated and advanced persistence
threats.
improve automation, reduce hardware and data
centre footprints, shorter deployment times, more
cost savings, higher performance, and less siloed IT
and OT departments and finally meet the regulatory
ad compliance requirements
Expanding attack surface
Continued use of outdated hardware and
software operating systems which may be
incompatible with standard modern defenses
such as antivirus software.
No Encryption.
Limited access control / permission management
Lack of security expertise among the engineers
 INSPIRA OT SECURITY EXPERTISE

Figure:1 Inspira OT security Reference Architecture based on Purdue Model and compliant to IEC 62443

COMPREHENSIVE MULTI LAYERED SECURITY

1. Layered firewalls with centralized management providing the below functions:

INTERNET PERIMETER IT-OT PERIMETER RUGGEDIZED SCADA

Stateful access control, URL & Stateful access control, Stateful access control,
content Filtering, Gateway SCADA/ICS protocol DPI, SCADA/ICS protocol DPI,
anti-virus, ant-malware, ant- bot, ant-malware, ant- bot, anti ant-malware, ant- bot, anti
anti -spam, IPS, VPN -spam, IPS, VPN -spam, IPS, VPN

inspiraenterprise.com
 2. Anti-APT Sandbox: Capable of identifying zero day attacks and anti DDoS protection

3. Identity and Access Management: The solution comprises of LDAP, self provisioning, PIM, SSO, Multi
factor authentication (MFA) which can be integrated with existing Active directory ,

4. Physical Access control systems,

5. Uni directional gateways (data diodes)

6. Secure Remote access with zero trust firewall functions and ICS protocol visibility

7. Certificate Authority and certificate life cycle management

8. Endpoint Protection: Anti-AV, Host IPS, Anti Exploit, Endpoint detection and response, Application
whitelisting, Data loss prevention, disk and file encryption

9. Asset inventory,

10. Backup,

11. Patch management,

12. OT threat intel and ICS threat intel feeds for ICS indicators of compromise (IOC’s)

13. ICS Visibility

Real time Asset inventory ICS cyber security risk

ICS vulnerability assessment
and network visualization monitoring

100+ SCADA protocols

ICS threat and anomaly
Dashboard and reporting supported for deep packet
detection
inspection

Continuously monitor
Improve response time to Integrated with SIEM and
networks & detect
suspicious behaviour ICS Threat Intelligence
malicious activity

inspiraenterprise.com
 INSPIRA SERVICES

Threat Hunting

OT Security Risk
Assessment/
Architectural
Review/ ICS Training
compliance/
Governance
Service
Real Time situation Incidence
awareness with Response
managed big data Retainer
security analytics

Vulnerability
Assessment and
Penetration
testing

Follow Us
contact_mea@inspiraenterprise.com
inspiraenterprise.com

inspiraenterprise.com