Book Image

IoT and OT Security Handbook

By : Smita Jain, Vasantha Lakshmi
Book Image

IoT and OT Security Handbook

By: Smita Jain, Vasantha Lakshmi

Overview of this book

The Fourth Industrial Revolution, or Industry 4.0, is all about digital transformation, manufacturing, and production. The connected world we live in today, including industries, comes with several cybersecurity challenges that need immediate attention. This book takes you through the basics of IoT and OT architecture and helps you understand and mitigate these security challenges. The book begins with an overview of the challenges faced in managing and securing IoT and OT devices in Industry 4.0. You’ll then get to grips with the Purdue model of reference architecture, which will help you explore common cyber attacks in IoT and OT environments. As you progress, you’ll be introduced to Microsoft Defender for IoT and understand its capabilities in securing IoT and OT environments. Finally, you will discover best practices for achieving continuous monitoring and vulnerability management, as well as threat monitoring and hunting, and find out how to align your business model toward zero trust. By the end of this security book, you’ll be equipped with the knowledge and skills to efficiently secure IoT and OT environments using Microsoft Defender for IoT.
Table of Contents (16 chapters)
Part 1: Understand the Challenges in IoT/OT Security and Common Attacks
Part 2: How Microsoft Defender for IoT Can Address the Open Challenges in the Connected World We Live in Today
Part 3: Best Practices to Achieve Continuous Monitoring, Vulnerability Management, Threat Monitoring and Hunting, and to Align the Business Model Toward Zero Trust
Chapter 9: Vulnerability Management and Threat Monitoring

The device inventory in an on-premises console or the sensor console and the Azure portal

An installed MDIoT sensor gathers devices into a on-prem portal as it scans through traffic. We call this the device inventory, and there are multiple places where this can be placed. There are three different places where you can examine the inventory, and which one to use depends on the maturity of the organization. An organization monitoring just one segment of the OT network can use the sensor console itself. An organization monitoring multiple isolated OT segments can use an on-premises management console, and the most advanced organization that wants to monitor IT, OT, IoT, and IIoT on a single console can use the Azure portal to see the consolidated inventory.

Often, organizations begin with the sensor console and move on to the MDIoT portal on Azure. However, cloud-native organizations start with Azure. In short, there is no rule of thumb, and from which console you decide to monitor...