Français
9. Analysis methods and tools
9.1 Defense in depth principle
This approach originated in the military world. In the world of risk management, we find the idea both in hazard studies for industrial facilities, notably with the LOPA method, and in nuclear safety.
The general idea is quite simple: multiple levels of protection, or lines of defense, reduce risk, since in the event of one of them failing, the others will prevent the attack from succeeding. The fundamental assumption is that each level must be independent, i.e. the failure of one level must not be linked to...
The Ultimate Scientific and Technical Reference
This article is included in
Design and production
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Analysis methods and tools
General procedure for securing an ICS
Bibliography
- (1) - WILLIAMS (T.J.) - A Reference Model for Computer Integrated Manufacturing from the Viewpoint of Industrial Automation. - IFAC Proceedings Volumes. 23 (1990). http://281-291. 10.1016/S1474-6670(17)51748-6
- ...
Standards and norms
- Series of standards on Industrial Automation and Control Systems Security. - ISA/IEC 62443 -
- Functional safety of electrical/electronic/programmable electronic safety-related systems - EC 61508-1 - 2010
- Industrial communication networks – Network and system security – Part 1-1: terminology, concepts and models - CEI/TS 62443-1-1 - 2009
- Industrial communication networks – Network and system security...
Regulations
Seveso III, Directive 2012/18/EU of the European Parliament and of the Council of 4 July 2012 on the control of major-accident hazards involving dangerous substances, amending and subsequently repealing Council Directive 96/82/EC,
NIS, Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information...
Directory
Organizations – Federations – Associations (non-exhaustive list)
ANSSI (French National Agency for Information Systems Security) https://www.ssi.gouv.fr
Software
The Ultimate Scientific and Technical Reference
