OT Cybersecurity Glossary
Understand the terminology associated with OT cybersecurity and its sub-disciplines using our online glossary
a
- Access Control List (ACL) - A method used to filter accessibility to a resource such as a PLC on a...
- Active Directory - The Microsoft application providing Lightweight Directory Access Protocol access management services.
- Application Allow-listing - Application allow lists are designed to prevent the execution of unauthorized and malicious programs. The...
- ARP Poisoning - The ARP protocol is used to resolve IPv4 addresses to link layer addresses, such as...
- Attack - As it relates to cybersecurity, an attempt to gain unauthorized access to system services, resources,...
- Authentication, Authorization and Accounting (AAA) - “Triple a”. A method for access management to assure a user can prove their identity,...
b
- Behavioral Analytics (BA) - Behavioral Analytics (BA) represents a cutting-edge approach in the cybersecurity landscape, leveraging data-driven algorithms and...
c
- Chain of Trust - In the vast and intricate world of digital security, the concept of a "Chain of...
- Cleartext - Information that is not encrypted
- Common Industrial Protocol™ (CIP) - A suite of messages and services used by OT devices for control, safety, configuration and...
- Critical Cyber System - Any Information or Operational Technology system or data that, if compromised or exploited, could result...
- Cybersecurity & Infrastructure Security Agency (CISA) - An agency of the Department of Homeland Security created to improve cybersecurity across all levels...
- Cybersecurity Architecture Design Review - Technical assessment based on government and industry-recognized standards, guidelines, and best practices that evaluates systems,...
- Cybersecurity Framework (CSF) - A recommended framework developed by the National Institute of Standards anf Technology to organize cybersecurity...
- Cybersecurity Incident - An event that, without lawful authority, jeopardizes, disrupts or otherwise impacts, or is reasonably likely...
d
- Data diode - A network appliance or device allowing data to travel only in one direction. Also referred...
- Data Historian - A centralized database supporting data analysis using statistical process control techniques. Another vulnerable surface requiring...
- Decoy Systems - In the ever-evolving game of cybersecurity, where attackers constantly devise new strategies to breach defenses,...
- Deep Packet Inspection (DPI) - Packet sniffing; a method that examines content of data packets including the header data and...
- Defense-in-depth - A broad strategy combining people, technology, and operations capabilities to prevent single points of failure...
- Demilitarized Zone (DMZ) - The network segment separating the Corporate Enterprise Zone and the Manufacturing/Process Zones. The DMZ must...
- Denial of Service - The prevention of authorized access to a system resource or the delaying of system operations...
- Dynamic Host Configuration Protocol (DHCP) - A mechanism for dynamic device IP assignments.
e
- East-West Traffic - The lateral movement of network traffic within a trust zone or local area network.
- Endpoint Detection and Response (EDR) - In today's digital age, where cyber threats loom large and the perimeter of defense has...
- Engineering Workstation (EWS) - A computer used to develop and support the process control applications. Workstations represent point access...
f
- Firewall (FW) - A network device which monitors inbound and outbound traffic. The firewall is configured to block...
- Forensic Readiness - In the intricate tapestry of modern business operations, where digital interactions form the backbone of...
i
- Immutable Logs - In the digital realm, where vast amounts of data are generated every second, the integrity...
- Industrial Control System (ICS) - The sensors, controllers, servers, workstations and networking devices which support the ability to produce a...
- Industrial Control Systems Secure by Design (ICSSbD®) - Mangan's Cybersecurity business guide, process, and cybersecurity management lifecycle incorporated into OT cyber resiliency from...
- Information Technology (IT) - The hardware and software components used to manage the production of a service or product
- Interdependencies - In an OT context, the relationships of reliance within and among Information and Operational Technology...
- Intrusion Detection System (IDS) - A network device which monitors network traffic for anomalous or signature-based data packets correlating to...
- Intrusion Prevention System (IPS) - A security appliance which attempts to identify malicious traffic and proactively blocks it from entering...
- ISA-62443 - Instrument Society of America Standard for Security of Industrial Automation and Control Systems. A series...
j
- Just-in-time (JIT) Access - In the vast digital landscape, where data is the new gold and cyber threats lurk...
k
- Key Rotation - In the realm of digital security, where encryption plays a pivotal role in safeguarding data,...
l
- Least Privilege - Assign minimum necessary rights to a subject that requests access to a resource, minimize allowable...
- Log Tampering - In the intricate world of digital systems, logs serve as the silent chroniclers, recording every...
m
- Man in the Middle (MITM) - Adversaries with privileged network access that seek to modify network traffic in real time using...
- Mean Time to Recovery (MTTR) - A relative ranking of the effort to recover an asset after an incident.
- Memorized Secret Authenticator - Type of authenticator comprised of a character string intended to be memorized by, or memorable...
- Micro-segmentation - In the vast interconnected world of digital networks, where data flows seamlessly across nodes and...
- Mitre Att&ck® - A knowledge base of threats, countermeasure controls and attackers known to be IT and OT...
- Multi-Factor Authentication (MFA) - An authentication method requiring the user to provide two or more credentials to gain access...
n
- National Institute of Science and Technology (NIST) - A agency of the United States government with its primary mission to promote innovation, equitable...
- North-South Traffic - Network traffic that moves through a perimeter boundary into another trust level.
o
- Operational Disruption - Deviation from or interruption of business-critical functions that results from a compromise or loss of...
- Operations Technology (OT) - The hardware and software components which make-up the Industrial Control Systems.
- Operator Workstation (OWS) - A computer used by the control room operators to interact with the process control applications....
p
- Pass-the-hash (PtH) Attacks - In the intricate dance of cybersecurity, where defenders and attackers are in a perpetual tango...
- Penetration Testing (AKA Pen-test) - A series of technical assessments targeting network devices and security controls to identify network flaws...
- Phishing - Tricking individuals to disclose sensitive personal information by claiming to be a trustworthy entity.
- Port Scanning - Using a program to remotely determine which ports on a system are open (e.g., whether...
q
- Quantum Cryptography - In the fascinating intersection of advanced physics and cybersecurity, a revolutionary concept emerges: Quantum Cryptography....
r
- Remote Access Trojan (RAT) - Programs that provide the capability to allow covert surveillance or the ability to gain unauthorized access to...
- Remote Terminal Session - Ability to access a network architecture. More common references are RDP for Microsoft’s Remote Desktop...
- Risk Appetite - In the intricate tapestry of business strategy and decision-making, one concept plays a pivotal role...
s
- Secure Socket Layer (SSL) - Encryption technology for secure transactions.
- Security Information and Event Management (SIEM) - Network monitoring technology capable of collecting log data and combining network inspection to detect threats...
- Security Orchestration - In the vast and complex realm of cybersecurity, where threats evolve at a dizzying pace...
- Shared Account - Account that is used by multiple users with a common authenticator to access systems or...
- Spam - Electronic junk mail or the abuse of electronic messaging systems to indiscriminately send unsolicited bulk...
- Subnet - Networks segmented in order to provide multilevel, hierarchical routing structure and shielding the subnetwork unnecessary...
t
- Threat Hunting - In the vast digital jungle, where malicious actors lurk in the shadows, waiting for an...
- Tokenization - In the digital era, where vast amounts of data traverse the cyber realm every second,...
- Tor / Onion Router - Software that allows users to browse the web anonymously by encrypting and routing requests through...
- Trust Relationship - In an IT/OT context, an agreed-upon relationship between two or more system elements that is...
u
- Unified Threat Management (UTM) - In the vast and intricate landscape of cybersecurity, where threats come in myriad forms and...
v
- Virtual Local Area Network (VLAN) - Group of devices configured in order to communicate as if they were attached to the...
- Virtual Private Network (VPN) - A method to allow secure internet traffic over a public network by encrypting that traffic...
w
- Worm - A computer program that can run independently, can propagate a complete working version of itself...
z
- Zero Trust - A cybersecurity strategy based on protecting resources bound by the premise that authorization decisions are...
- Zero-day Vulnerability - In the ever-evolving world of cybersecurity, where attackers and defenders are in a relentless race...
- Zombie Device - In the vast interconnected world of the Internet of Things (IoT), where devices of all...
MANGAN CYBERSECURITY
ALWAYS ON GUARD
Our team of experts can engage in an effective way to help you understand how mature your OT cybersecurity posture is and how the IT-OT networks are connected. Our unique approach to cybersecurity risks always integrated with business continuity in mind, helps to protect your most valuable assets. Leveraging our ICSSbD® Evaluation Toolkit, a comprehensive cybersecurity assessment can be completed in matter of few days or weeks, allowing for quick feedback, remediation, or response if necessary.