In this chapter, we outlined the DiD approach. You learned that the goal of a DiD strategy is the achievement of a security posture through the coordinated and combined use of multiple security countermeasures that is based on two main concepts: defense in multiple places and layered defenses. We looked at how DiD is based on the integration of three different elements: people, technology, and operating methods. Since firewalls are an important part of securing the control network, we also provided a short description of the different classes of firewall. After that, we explored the most common architectures to secure the industrial devices linked to the control network.
Following this, we looked at how to segregate a control network by means of DMZ and VLAN. We examined the most common security practices currently used in the industrial control environment and analyzed...