-·

CHECK POINT'"

TOP10 Critical Infrastructure

•

•• •

�

-

•

II •

- .

-

• - • • •

.. flii.i ' :-;:

...

-

•

•

.. . . . . .

-

��

and SCADA/ICS Cybersecurity I� .. ��

Vulnerabilities and Threats I 111 ·

· ..• I -. � \ ..• ·

-...,- �.•, I ·, , ..... • .. . - . r'j

�

ABOUT THIS DOCUMENT

Protect your organization from cyber threats targeting Critical Infrastructure and SCADA/ICS with our informative infographic. Discover why these systems are prime targets for threat actors and the common threats they face. Learn how to mitigate risks, enhance cybersecurity, and ensure the resilience of your Industrial Control Systems [ICS) and Operational Technology [OT) networks. Download this infographic now to fortify your defenses against potential cyberattacks.

Learn More: https://www.checkpoint.com/in dustry/in dustrial-control-systems/

TOP 10 Critical Infrastructure and SCADA/ICS Cybersecurity Vulnerabilities and Threats

Industrial Control Systems (ICS) and Operational Technology (OT) networks are prime targets for cyberattacks for various reasons. Here are some common threats:

Critical infrastructure and SCADA/ICS are prime targets for threat actors due to their high impact on critical infrastructure, potential for economic disruption, opportunities for espionage and intellectual property theft, geopolitical motives, lack of security awareness, potential cascading effects, and limited detection capabilities.

ICS and OT systems often have long lifespans and are designed with a primary focus on facilitating production processes rather than prioritizing cybersecurity. This situation creates significant vulnerabilities that must be addressed to protect critical infrastructure.

01> Legacy Software > ICS and OT systems lack modern cybersecurity

practices. > IIoT applications run on legacy operating systems,

lacking authentication and data integrity features. > Allows attackers unrestricted access to systems.

02 > Default Configuration > Out-of-box systems with default or simple passwords and baseline configurations.

> Makes it easy for attackers to enumerate and compromise systems.

03 > Lack of Encryption > Legacy SCADA controllers and industrial protocols

lack encryption. > Attackers can sniff and discover usernames

and passwords.

04 > Remote Access > Increasing interconnectivity provides unauthorized

access to critical operations. > SCADA systems connected to unaudited dial-up

lines or remote-access servers creates backdoor access to OT network and corporate LAN.

05 > Inconsistent Policies and Procedures > IT and OT personnel have different approaches to

securing industrial controls. > Unified security policy needed to protect both IT

and OT technology. > Collaboration between IT and OT teams is essential.

06 > Lack of Network Segmentation > Internet-connected OT networks without proper

segmentation create vulnerabilities. > Misconfigured networks and lack of firewall

increase the risk of unauthorized access.

07 > DDoS Attacks > Attackers exploit unprotected ICS systems with

limited access controls. > Vulnerable and unpatched OT systems are targeted

for takeover, to be used as bots in DDoS campaigns.

08 > Web Application Attacks > Increasing connectivity exposes traditional

OT systems to web-based attacks. > HMIs and PLCs accessible via web interfaces

are vulnerable to XSS and SQL injection.

09 > Malware > OT systems require robust defenses against

malware attacks. > Anti-malware protection, host-based firewall

controls, and effective patch management are crucial.

> Virtual patching helps reduce exposure to threats and vulnerabilities.

10 > Command Injection & Parameters Manipulation

> Lack of validation allows attackers to execute arbitrary commands on OT systems.

> Invalidated data poses a significant risk.

ICS and OT devices connected to critical infrastructure and manufacturing industry networks are prime targets for cyberattacks. These systems play a crucial role in controlling and managing essential operations, making them attractive to threat actors. It is crucial for organizations to recognize vulnerabilities associated with these systems and networks and take appropriate measures to protect them. This includes implementing robust cybersecurity practices, conducting regular risk assessments, applying security updates and patches, improving network segmentation, and promoting a culture of security awareness among employees.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

Worldwide Headquarters 5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599

U.S. Headquarters 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 1-800-429-4391

www.checkpoint.com © 2023 Check Point Software Technologies Ltd. All rights reserved.

The Check Point Quantum Rugged security gateways, featuring the new 1595R delivers proven, integrated AI security, high-speed 5G connectivity

and more for deployment in harsh environments as part of a complete end-to-end ICS security solution.

To learn more about Check Point’s Solutions for Critical Infrastructure, please visit www.checkpoint.com/ics

COVER Top 10 Critical Infrastructure and SCADA ICS Cybersecurity Vulnerabilities and Threats FINAL