Can I Really Protect My Broadcast Plant From a Cybersecurity Attack?

Abstract

Internet Protocol (IP) networks are fundamental building blocks of the broadcast technical plant. Integration with the legacy broadcast infrastructure can range from minimal system control functions to an end-to-end IP-based content transport facility. Regardless of the level of integration, cybersecurity cannot be ignored to ensure a reliable, secure, and protected system. Industry cybersecurity principles are commonly based on a complex framework of principles from the National Institute of Standards and Technology (NIST). The NIST Framework is often a complex and daunting task to implement within a broadcast facility. An effective cybersecurity program begins with the design of the network. This article provides an understanding of practical implementable cybersecurity precautions based on the NIST Framework for the broadcast station. Specific topics to be addressed will include an overall understanding of cybersecurity principles and a step-by-step infrastructure implementation guide for the broadcast facility whether large or small. The guide will be focused on a secure network design approach, the use of Ethernet switch security capabilities, the use of packet filtering and firewalls, and an understanding of implementing common cybersecurity threat mitigation techniques.