State Based Network Isolation for Critical Infrastructure Systems Security

Abstract

The collision of information technology (IT) and operational technology (OT) networks has resulted in some significant security challenges. Cyber attacks are now taking place against critical infrastructures and the nature of industrial automation control systems equipment in OT networks makes traditional IT security measures more difficult if not impossible to employ. A new method of system isolation based on system state vice network traffic restrictions is presented as a means to protect critical systems from conventional IT based attacks. This new method of protection functions by isolating systems from the network, yet moving data in form of state transfer vice network message. This method improves reliability and provides a means of protection from most current IT based attack vectors.