3.1.5 IoT, ICS/SCADA & Embedded Systems

Dedicated systems are specialized computing devices designed to perform a singular, specific task rather than serving as general-purpose workstations. These systems often operate in environments where functionality and real-time processing are prioritized over traditional security measures, making them unique targets for cyber threats.

IoT and Embedded Systems Embedded systems are hardware and software combinations integrated into larger devices to provide specific functionality. - Microcontrollers (SoC): Integrated circuits that include a processor, memory, and input/output peripherals on a single chip. - Internet of Things (IoT): A network of physical objects—wearables, smart thermostats, and appliances—that connect to the internet to exchange data. - Security Constraints: These devices often lack the processing power, memory, or battery life to run modern antivirus or intensive encryption. - Common Vulnerabilities: Hardcoded "admin" passwords, lack of patch management, and transmission of data in plaintext.

Industrial Control Systems (ICS) and SCADA ICS describes the integration of hardware and software with network connectivity to support critical infrastructure. - SCADA (Supervisory Control and Data Acquisition): High-level systems used to monitor and control large-scale physical processes, such as power grids and water treatment plants. - RTU (Remote Terminal Unit): A microprocessor-controlled device that connects physical objects to SCADA systems. - PLC (Programmable Logic Controller): Robust, solid-state computers used on factory floors to automate specific industrial processes. - HMI (Human-Machine Interface): The dashboard or screen that allows human operators to interact with the SCADA system. - Fieldbus: A specialized industrial network protocol used for real-time communication between controllers and sensors.

Specialized Systems - Smart Devices: Systems like smart meters or building automation (HVAC and lighting) that use sensors to optimize resources. - Baseband Radio: Found in mobile devices, these manage all radio functions (LTE, 5G) and often run their own proprietary operating system. - MFDs (Multifunction Devices): Networked printers and scanners that store sensitive data on internal hard drives, often overlooked in security audits.

Securing Dedicated Systems Balancing functionality with security is the primary challenge for embedded systems. - Network Segmentation: Placing ICS/SCADA systems on isolated VLANs or behind air gaps to prevent lateral movement from the corporate network. - Wrappers: Encapsulating insecure protocols in secure tunnels (like SSH or TLS) to protect data in transit. - Patching Management: Many embedded systems have "forever-day" vulnerabilities because the firmware cannot be updated without physical replacement.

Quick recall - SCADA/ICS: Keywords: power grid, utility, PLC, HMI, critical infrastructure. - SoC (System on a Chip): A single chip containing all components of a computer. - Security challenge: Limited power/resources lead to weak encryption. - Physical Security: Essential for IoT, as these devices are often in public, accessible areas. - Segmentation: The #1 architectural defense for legacy ICS systems.