Secure Coding Meets Critical Infrastructure Defense in Water Systems
summary
Municipal water systems at City of Dallas scale move from air‑gapped PLCs to cloud dashboards and remote vendor access, increasing entry points; real incidents include a 2021 chemical dosing manipulation and a 2023 municipal PLC compromise that forced manual operation. The practical stack uses modular network segmentation (corporate IT → DMZ → OT → process control), secure API design (short‑lived tokens, MFA, schema validation, rate limits, detailed logging), IDS/IPS, ML‑based anomaly detection, automated threat modeling and hardened CI/CD; these measures enable earlier detection, containment, and faster recovery aligned to NIST and IEC standards.
AI-written summary · about
chapters (11)
- 0:00Secure coding in water systems
- 1:34Attack surface in water infrastructure
- 5:54Cyber incidents in water systems
- 8:21Defense in depth for OT/IT
- 12:13Network segmentation strategies
- 15:44Zero trust across layers
- 18:11Security in development lifecycle
- 20:21ML for anomaly detection
- 21:45Ransomware detection and containment
- 22:50Multi-zone water treatment
- 24:54Engineering versus security standards
related talks
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
52mPanel: Industrial Systems In The Crosshairs: What It Really Takes To Defend OT
50mJoin the Mission to Strengthen the Industrial Ecosystem
47mWhy is SCADA Security an Uphill Battle?
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity
43mGet Smart on Smart Tech!
35mAppSec Security: The SDLC in the age of agentic
48mYou Too Can Secure OT