ControlLogix PLC Endpoint Hardening
Reviews controlLogix PLC Endpoint Hardening and evaluates key implications for security practitioners.
Summary
Threat landscape
The speaker argues PLCs are increasingly targeted in critical infrastructure while IT/SCADA layers get better patching and monitoring. DNI and industry data cited show nation-state activity, outdated software, and roughly 12% of assets internet-exposed; oil-and-gas reporting suggests PLCs are hit more than SCADA.
Problem
Rockwell ControlLogix dominates North America, yet few deployments are patched or hardened despite broad critical-infrastructure use.
Defense in depth
Recommendations span physical controls (locking unused USB/SD ports), logical controls (RBAC, SSO via FactoryTalk/AD/Azure AD with MFA), encryption at rest, locking static IPs, disabling unused ports/web pages/SNMP, and keeping controllers in run mode to block remote program-mode changes.
CIP Security focus
Most time covers ODVA-managed CIP Security for authentication, integrity, and confidentiality. FactoryTalk Policy Manager (free) defines zones/conduits on Purdue-model networks and pushes policy to CIP-capable devices. PROFINET, DNP3, and Modbus TCP security are mentioned as less-adopted alternatives.
Related talks
CyberRisk TV·17 min
Amanda Makowsky
Amanda Makowsky analyzes Endpoint Hardening in 5 Minutes: No gpupdate Required with Configuration Manager.
S4x25·25 min
Analyzes A PLC Integrated Security Module and evaluates key implications for security practitioners.
S4x25·26 min
Reviews SAST Tools For Secure PLC Programming and evaluates key implications for security practitioners.