Mhoroi mose! Yaidiwa nemunhu wese portal yaive nezvinyorwa zvakawanda zvakasiyana pamusoro pechitupa mumunda wekuchengetedzwa kweruzivo, saka handisi kuzotaura mavambo uye kusarudzika kwezvirimo, asi ndichiri kuda kugovera ruzivo rwangu rwekutora GIAC (Global Information Assurance Company) certification mumunda weindasitiri cybersecurity. Kubva pakuonekwa kwemazwi anotyisa kudai , , Shamoon, Triton, musika wekupa masevhisi enyanzvi anoita seIT, asi anogona zvakare kuremedza PLCs nekunyorazve gadziriso pamamanera, uye panguva imwechete simiti haigone kumiswa, yakatanga kuumbwa.
Aya ndiwo maitiro eiyo pfungwa yeIT&OT (Information Technology & Operation Technology) yakauya munyika.
Pakarepo chinotevera (zviri pachena kuti vashandi vasina kukodzera havafanirwe kubvumidzwa kushanda) kwakauya kudikanwa kwekusimbisa nyanzvi mumunda zvine chekuita nekuona kuchengetedzwa kwemaitiro ekudzora maitiro uye maindasitiri masisitimu - izvo, zvinozoitika, kune zvakawanda ivo muhupenyu hwedu, kubva kune otomatiki yekupa mvura vharafu mufurati kuenda kune yekudzora system ndege (rangarirai chinyorwa chakanakisa nezve kuferefeta matambudziko ) Uye kunyange, sezvazvakazoitika, yakaoma mishonga yekurapa.
Muchidimbu lyric pamusoro pekuti ndakasvika sei pakuda kuwana chitupa (unogona kuchiruka): Ndapedza zvidzidzo zvangu paFaculty of Information Security pakupera kwemaXNUMXs, ndakapinda muchikamu chegwai rekushandisa nemusoro wangu. yakasimudzwa, ichishanda semakanika kune yakaderera-ikozvino yekuchengetedza alarm masisitimu. Zvinoita sekunge ruzivo rwekuchengetedza rwakaudzwa kwandiri kubhizinesi panguva iyoyo :) Aya ndiwo matangiro akaita basa rangu seautomated control system nyanzvi ine bachelor's degree mukuchengetedza ruzivo. Makore matanhatu gare gare, ndakwira pachinzvimbo chemukuru wedhipatimendi reSCADA masisitimu, ndakasiya kuti ndishande semupangamazano wezvekuchengetedzwa kwemaindasitiri anodzora masisitimu mune imwe kambani yekunze inotengesa masoftware nemidziyo. Apa ndipo pakamuka kudiwa kwekuve nyanzvi yezvekuchengetedza ruzivo.
ibudiriro sangano rinoitisa kudzidziswa uye certification yeruzivo rwekuchengetedza ruzivo. Mukurumbira wechitupa cheGIAC wakakwira zvakanyanya pakati penyanzvi nevatengi mumisika yeEMEA, US, uye Asia Pacific. Pano, munzvimbo ye-post-Soviet uye munyika dzeCIS, chitupa chakadaro chinogona kukumbirwa chete nemakambani ekunze ane bhizinesi munyika dzedu, pasi rose uye masangano ekubvunzurudza. Ini pachangu, handina kumbobvira ndasangana nechikumbiro chekupihwa chitupa chakadaro kubva kumakambani epamba. Munhu wese ari kukumbira CISSP. Aya ndiwo maonero angu ekuzvibata uye kana paine munhu akagovera ruzivo rwavo mune zvakataurwa, zvichave zvinonakidza kuziva.
Kune akati wandei nzvimbo dzakasiyana muSANS (mumaonero angu, nguva pfupi yadarika vakomana vakawedzera nhamba yavo zvakanyanya), asi kunewo makosi anonakidza anoshanda. Ndakanyanya kuifarira . Asi nyaya ichange iri pamusoro pekosi uye chitupa chakanzi: .
Pamhando dzese dzeIndustrial Cyber ββββSecurity certification dzinopihwa neSANS, iyi ndiyo yakasarudzika. Sezvo yechipiri ine chekuita zvakanyanya nePower Grid masisitimu, ayo kuMadokero anogamuchira kutariswa kwakakosha uye ari eboka rakasiyana rehurongwa. Uye chechitatu (panguva yenzira yangu yechitupa) ine chekuita neChiitiko Response.
Iyo kosi haina kudhura, asi inopa ruzivo rwakanyanya rweIT&OT. Zvichanyanya kubatsira kune avo macomrades vakafunga kuchinja ndima yavo, semuenzaniso kubva kuIT kuchengetedza muindasitiri yemabhangi kuenda kuIndustrial Cyber ββββSecurity. Sezvo ini ndanga ndatove neruzivo mumunda wemaitiro ekudzora masisitimu, chiridzwa uye tekinoroji yekushandisa, pakanga pasina chinhu chitsva kana chakakosha kwandiri mukosi iyi.
Kosi yacho ine 50% dzidziso uye 50% maitiro. Kubva pakuita, makwikwi anonyanya kufadza aive NetWars. Kwemazuva maviri, mushure mekirasi huru yemakirasi, vadzidzi vese vemakirasi ese vakakamurwa kuita zvikwata uye vakaita mabasa kuti vawane kodzero dzekuwana, kubvisa ruzivo rwakakosha, kuwana mukana kune network, boka remabasa ekusimudzira hashi, kushanda neWireshark. uye marudzi ese emhando dzakasiyana.
Zvidzidzo zvekosi zvinopfupikiswa mumhando yemabhuku, aunozogamuchira kuti ushandise nekusingaperi. Nenzira, iwe unogona kuvatora bvunzo, sezvo iyo fomati iri Open Book, asi ivo havazokubatsira zvakanyanya, sezvo bvunzo ine maawa matatu, 3 mibvunzo, uye mutauro wekutumira Chirungu. Mumaawa matatu ese, unogona kutora kuzorora kwemaminetsi gumi nemashanu. Asi yeuka kuti nekutora kuzorora kwemaminetsi gumi nemashanu uye kudzokera kumaedzo mushure me115, uri kungosiya maminetsi gumi asara, sezvo usingachakwanisi kumisa nguva muchirongwa chekuyedza zvakare. Iwe unogona kusvetuka kusvika kumibvunzo gumi nemishanu, inozoonekwa kumagumo chaiko.
Ini pachangu, ini handikurudzire kusiya mibvunzo yakawanda kune gare gare, nekuti 3 maawa haisi nguva yakakwana, uye kana pakupedzisira uine mibvunzo isati yagadziriswa, pane mukana wakakura wekusakwanisa kuita. nenguva. Ndakasiya kune gare gare mibvunzo mitatu chete yaive yakandiomera chaizvo, sezvo ine chekuita neruzivo rweNIST 800.82 uye NERC standard. Mupfungwa, mibvunzo yakadai "yekuzotevera" inorova tsinga dzako kumagumo - kana uropi hwako hwaneta, iwe unoda kuenda kuchimbuzi, iyo timer pachiratidziro inoita seinomhanyisa zvakanyanya.
Kazhinji, kuti upfuure bvunzo unofanirwa kuwana 71% mhinduro dzechokwadi. Usati watora bvunzo, iwe uchave nemukana wekudzidzira pamiyedzo chaiyo - sezvo mutengo unosanganisira 2 tsika bvunzo dze115 mibvunzo uye nemamiriro akafanana nebvunzo chaiyo.
Ini ndinokurudzira kutora bvunzo mwedzi mushure mekupedza kudzidziswa, kushandisa mwedzi uno pane zvakarongeka kuzvidzidza pane izvo nyaya dzaunonzwa usina chokwadi. Zvingave zvakanaka kana iwe ukatora zvakadhindwa zvakagamuchirwa panguva yekosi, izvo zvinotaridzika sezvipfupi zvipfupi pane yega yega - uye nechinangwa kutsvaga ruzivo pamusoro pemisoro iri mumabhuku aya. Dhonza mwedzi kuita zvikamu zviviri, kutora bvunzo dzekudzidzira uye kuwana mufananidzo wakakasharara wenzvimbo dzipi dzaunenge wakasimba uye kwaunoda kuvandudza.
Ini ndinoda kuratidza iwo anotevera nzvimbo huru dzinoita bvunzo pachayo (kwete iyo kosi yekudzidziswa, nekuti inovhara zvakanyanya nyaya dzakakura):
- Chengetedzo Yemuviri: Kufanana nedzimwe bvunzo dzetifiketi, iyi nyaya inopihwa zvakanyanya kutariswa muGICSP. Pane mibvunzo pamusoro pemhando dzemakiyi emuviri pamagonhi, mamiriro ane manyepo emagetsi epfuura anotsanangurwa, apo iwe unofanirwa kupa mhinduro kuti unzwisise dambudziko. Pane mibvunzo yakanangana nekuchengetedza tekinoroji (maitiro), zvichienderana nenzvimbo yenyaya - maitiro emafuta uye gasi, zvidyarwa zvemagetsi enyukireya kana magidhi emagetsi. Semuyenzaniso, panogona kunge paine mubvunzo wakaita sekuti: Sarudza kuti ndeupi rudzi rwekudzora kuchengetedzwa kwemuviri mamiriro ezvinhu kana Alarm ichibva kumhepo tembiricha sensor paHMI? Kana kuti mubvunzo wakaita sekuti: Ndeapi mamiriro (chiitiko) anozoshanda sechikonzero chekuongorora marekodhi evhidhiyo kubva kumakamera ekutarisa eiyo nzvimbo yekuchengetedza system?
Muchikamu chemashoko, ndaizocherechedza kuti nhamba yemibvunzo pachikamu ichi mubvunzo dzangu uye mumiedzo yekudzidzira haina kudarika 5%.
- Imwe uye imwe yeakanyanya kupararira mapoka emibvunzo mibvunzo pamusoro pemaitiro ekudzora masisitimu, PLC, SCADA: pano zvichave zvakafanira kurongeka kusvika pakudzidza kwezvinhu pamusoro pemagadzirirwo ehurongwa hwekudzora masisitimu, kubva kuma sensors kuenda kumaseva uko application software pachayo. anomhanya. Nhamba yakakwana yemibvunzo ichawanikwa pamhando dzemaindasitiri ekufambisa data protocol (ModBus, RTU, Profibus, HART, nezvimwewo). Pachave nemibvunzo nezvekuti RTU inosiyana sei kubva kuPLC, maitiro ekudzivirira data muPLC kubva pakugadziriswa neanorwisa, munzvimbo dzekurangarira iyo PLC inochengetera data, uye uko iyo logic pachayo inochengeterwa (chirongwa chakanyorwa ne process control system programmer. ) Semuenzaniso, panogona kunge paine mubvunzo werudzi urwu: Ipa mhinduro yekuti ungaona sei kurwiswa pakati pePLC neHMI inoshanda uchishandisa ModBus protocol?
Pachave nemibvunzo pamusoro pemisiyano pakati peSCADA neDCS masisitimu. Nhamba huru yemibvunzo pamitemo yekuparadzanisa automated process control network paL1, L2 level kubva paL3 level (ini ndichatsanangura zvakadzama muchikamu nemibvunzo pane network). Mibvunzo yemamiriro ezvinhu pamusoro penyaya iyi ichavewo yakasiyana-siyana - inotsanangura mamiriro ezvinhu muimba yekutonga uye iwe unoda kusarudza zviito zvinofanira kuitwa nemuiti wekushanda kana dispatcher.
Kazhinji, chikamu ichi ndicho chakanyanya kujeka uye nhete-mbiri. Zvinoda kuti uve neruzivo rwakanaka:
- otomatiki kudzora sisitimu, chikamu chemunda (sensors, marudzi ekubatanidza mudziyo, maficha emuviri sensors, PLC, RTU);
- emergency shutdown masisitimu (ESD - emergency shutdown system) yemaitiro uye zvinhu (nenzira, kune yakanakisa nhevedzano yezvinyorwa pane iyi nyaya paHabrΓ© kubva )
- kunzwisisa kwekutanga kwemaitiro emuviri anoitika, semuenzaniso, mukunatswa kwemafuta, kugadzirwa kwemagetsi, mapaipi, nezvimwe;
-kunzwisisa kwezvivakwa zveDCS neSCADA masisitimu;
Ini ndaizoona kuti mibvunzo yerudzi urwu inogona kuitika kusvika ku25% mumibvunzo yese ye115 yebvunzo. - Network tekinoroji uye kuchengetedzeka kwetiweki: Ini ndinofunga kuti nhamba yemibvunzo iri mumusoro iyi inouya pekutanga mubvunzo. Panogona kunge paine zvese zvachose - iyo OSI modhi, pamatanho api iyi kana iyo protocol inoshanda, mibvunzo yakawanda pane network segmentation, mibvunzo yemamiriro ezvinhu pakurwiswa kwenetiweki, mienzaniso yekubatanidza matanda nechikumbiro chekuona rudzi rwekurwisa, mienzaniso yekuchinja masisitimu. nechikumbiro chekuona kurongeka kwakashata, mibvunzo pamusoro pekusagadzikana network protocol, mibvunzo pane chaiyo yetiweki yekubatanidza yemaindasitiri ekutaurirana maprotocol. Vanhu vanonyanya kubvunza zvakawanda nezve ModBus. Chimiro chetiweki mapaketi eiyo ModBus yakafanana, zvichienderana nerudzi rwayo uye shanduro dzinotsigirwa nemudziyo. Yakawanda kutarisisa kunobhadharwa pakurwiswa kweasina waya network - ZigBee, Wireless HART, uye ingori mibvunzo nezve network chengetedzo yemhuri yese ye802.1x. Pachave nemibvunzo nezve iyo mitemo yekuisa mamwe maseva mune process control system network (pano iwe unofanirwa kuverenga iyo IEC-62443 yakajairwa uye unzwisise misimboti yereferenzi modhi ye process control system network). Pachave nemibvunzo nezve Purdue modhi.
- Chikamu chezvinyorwa zvine chekuita chete neanoshanda maficha ekushanda kwemagetsi ekufambisa masisitimu uye ruzivo rwekuchengetedza masisitimu kwavari. MuUSA, chikamu ichi cheotomatiki maitiro ekudzora masisitimu anonzi Power Grid uye anopihwa rakasiyana basa. Nechinangwa ichi, zviyero zvakapatsanurwa zvakatopihwa (NIST 800.82) inoronga nzira yekugadzira masisitimu ekuchengetedza ruzivo echikamu ichi. Munyika dzedu, kazhinji, chikamu ichi chinongogumira kune ASKUE masisitimu (ndiruramise kana paine munhu akaona nzira yakakomba yekutarisa kugoverwa kwemagetsi uye masisitimu ekutumira). Saka, mubvunzo iwe unowana chaiyo mibvunzo ine chekuita nePower Grid. Kune chikamu chikuru, aya aive ekushandisa-kesi yeimwe mamiriro akagadziridzwa paSimba Plant, asi panogona kuve zvakare neongororo pamidziyo inoshandiswa zvakanyanya muSimba Grid. Pachave nemibvunzo inogadzirisa ruzivo rweNIST zvikamu zvechikamu ichi chemasisitimu.
- Mibvunzo ine chekuita neruzivo rwezviyero: NIST 800-82, NERC, IEC62443. Ini ndinofunga pano pasina chero akakosha ekutaura - iwe unofanirwa kufamba-famba zvikamu zveyero, iyo ine basa rei uye ndeapi mazano arimo. Pane mibvunzo yakananga, semuenzaniso, kubvunza kuwanda kwekutarisa kushanda kweiyo system, kuwanda kwekugadzirisa maitiro, nezvimwe. Sechikamu chezana chemibvunzo yakadai, kusvika ku15% yehuwandu hwehuwandu hwemibvunzo inogona kusangana. Asi zvinoenderana. Semuenzaniso, pabvunzo mbiri dzekudzidzira ndakasangana nemibvunzo miviri yakafanana. Asi chokwadi vaive vakawanda panguva yebvunzo.
- Zvakanaka, chikamu chekupedzisira chemibvunzo ndeye marudzi ese ekushandisa-kesi uye mibvunzo yemamiriro ezvinhu.
Kazhinji, kudzidziswa kwacho, kunze kweCTF NetWars, kwaisanyanya kundidzidzisa maererano nekuwana ruzivo rutsva. Asi, ruzivo rwakadzama rwemimwe misoro rwakawanikwa, kunyanya mumunda wekurongeka uye kuchengetedzwa kwemaredhiyo eredhiyo anoshandiswa kufambisa ruzivo rwetekinoroji, pamwe nezvimwe zvakarongeka zvakarongwa pachimiro chemwero miitiro yakapihwa kune iyi nyaya. Naizvozvo, kune mainjiniya uye nyanzvi dzine ruzivo rwakakwana uye ruzivo rwekushanda nemaitiro ekudzora masisitimu/zviridzwa masisitimu kana Industrial Networks, unogona kufunga nezve kuchengetedza pakudzidziswa (uye kuchengetedza zvine musoro), zvigadzirire uye wonanga kunotora bvunzo yetifiketi, iyo , nenzira, inokosha 700USD. Kana ukakundikana, unofanira kubhadhara zvakare. Kune dzakawanda nzvimbo dzetifiketi dzinokugamuchira iwe bvunzo; chinhu chikuru ndechekufanonyorera. Kazhinji, ini ndinokurudzira kuseta zuva rebvunzo ipapo, nekuti zvikasadaro iwe unogara uchinonoka, uchitsiva nzira yekugadzirira nezvimwe zvakakosha uye zvisiri zvakakosha. Uye kuva nezuva rekupedzisira chairo kunoita kuti uzvikurudzire.
Source: www.habr.com