Design and Implementation of a Security Architecture for Critical Infrastructure Industrial Control Systems

Explore the design and implementation of a security architecture for critical infrastructure industrial control systems in this 40-minute Linux Foundation talk. Delve into GE's approach to protecting electrical generation and distribution systems, aviation, transportation, and medical components from nation-state cyber warfare. Learn about hardware roots of trust, secure boot processes, and integrated security measures across firmware, hypervisors, operating systems, applications, and network services. Gain insights into the architecture overview, reference implementations, product status, and remaining challenges. Benefit from the expertise of David Safford, a Senior Principal Engineer at GE Research, as he shares his experience in developing robust security solutions for control systems in various industries.

Intro
Power Generation
Cyberattacks
Industrial Internet
Information Insurance Framework
Reference Implementation
Types of Secure Boot
Control Embedded Control Systems
Tboot
Concept
Logging in
Kernel Backdoor