Get up and running with industrial cybersecurity monitoring with this hands-on book, and explore ICS cybersecurity monitoring tasks, activities, tools, and best practices
Key Features
- Architect, design, and build ICS networks with security in mind
- Perform a variety of security assessments, checks, and verifications
- Ensure that your security processes are effective, complete, and relevant
Book Description
With IT industries expanding on the cloud, cyberattacks have increased significantly, making it crucial for you to be able to recognize your control system's vulnerabilities and implement advanced techniques to defend critical infrastructure systems against rapidly evolving cyber threats. This second edition of Industrial Cybersecurity covers the updated Industrial Demilitarized Zone (IDMZ) architecture and shows you how to implement a solid security program for the Industrial Control System (ICS) environment.
You'll begin by learning how to design security-oriented architecture that allows you to implement the tools, techniques, and activities covered in this book effectively and easily. Moving on, you'll get to grips with the monitoring, tracking, and trending (visualizing) activities, tools, concepts, and procedures of ICS cybersecurity risks as well as understand the overall security program and posture/hygiene of the ICS environment. The book then introduces you to threat hunting principles, tools, techniques, and methodology to enable you to successfully identify malicious activity. Finally, you'll work with incident response and incident recovery tools, techniques, and activities in an ICS environment.
By the end of this book, you'll have gained a solid understanding of industrial cybersecurity monitoring, assessments, incident response activities, as well as threat hunting.
What you will learn
- Monitor the ICS security posture actively as well as passively
- Respond to incidents in a controlled and standard way
- Understand what are the incident response activities required in your ICS environment
- Perform threat-hunting exercises using the Elasticsearch, Logstash, and Kibana (ELK) stack
- Assess the overall effectiveness of your ICS cybersecurity program
- Discover tools, techniques, methodologies, and activities to perform risk assessments for your ICS environment
Who This Book Is For
If you are an ICS security professional or anyone curious about ICS cybersecurity for extending, improving, monitoring, and validating your ICS cybersecurity posture, then this book is for you. IT/OT professionals interested in entering the ICS cybersecurity monitoring domain or searching for additional learning material for different industry-leading cybersecurity certifications will also find this book useful.
