Detect the Undetected: Successful NIDS Strategies for Substations and Renewable Energies in the light of regulations

OT networks have long since ceased to be isolated air-gapped infrastructures. They are increasingly connected to corporate IT and mobile access devices in order to automate and simplify processes.

Much is written about the vulnerability of operational technology (OT) and industrial control networks. However, there is seldom any concrete information about the vulnerabilities and risks that can really be found in OT networks.

With the NIS2 Directive, the intensification of cyber security requirements for critical infrastructures and important organizations is going into the next round. In the future, companies will be required to address and verify implementation of 10 categories in their cyber risk management.

From Pipedream to GhostSec to a never-ending stream of CISA advisories on newly found vulnerabilities in industrial components: It is an open secret that operational technology (OT) networks are historically insecure.

Not only the daily news but also extensive studies reveal that over the past two years globally, ransomware and cybercrime attacks have become increasingly frequent and sophisticated. This is posing a major problem for industrial companies and critical infrastructures.

The notorious insecurity of OT and especially (I)IoT devices has a long history of fearmongering.