DEF CON 32 - The Risk and Reward of Distributed Industrial Control - Joe Slowik

The main message is that distributed industrial control systems, enabled by wireless and remote connectivity, have dramatically expanded the attack surface for critical infrastructure, requiring new security and resilience strategies. 2:00

Key Takeaways:
• Distributed operations now rely on wireless, remote connectivity, increasing exposure to adversaries 4:30.
• The acid rain malware incident disrupted wind turbines via a satellite network, demonstrating real-world risks of unsecured wireless control systems 10:21.
• Colonial Pipeline’s incident highlights that even small, distributed systems can face severe disruption if control links are compromised 13:01.
• Critical infrastructure must ensure command integrity and have fail-safe fallbacks to prevent cascading failures during network outages 19:45.
• Security must prioritize communication integrity over encryption due to latency and bandwidth constraints in remote systems 21:47.

Remote operations are now a necessity, not a luxury, but without robust security and redundancy, they introduce significant risks to operational safety and continuity. 25:32

Sources:

• 2:00 Introduction to distributed operations and expanded attack surfaces
• 4:30 Shift from wired to wireless connectivity in industrial systems
• 10:21 Acid rain malware attack on wind turbines via satellite network
• 13:01 Colonial Pipeline in