Edit Place Overview Page

Choose a layout and drag widgets onto your Overview Page to customize it. Widgets placed on the page below can be configured by selecting the symbol.

Dismiss this customization messageDon't show me this again.

All Places >

Security

Actions

About Security

Overview
Content
People
Projects
Events
More

Share group

Manage

Security Links

Loading...

Ethical Disclosure Policy

PI Security Tech Support

YouTube: Securing PI

Recently Joined

Loading...

tijohnson Joined Jul 21, 2017
Cswann Joined Jun 21, 2017
LalBabuShaik Joined Jun 12, 2017

View all members

Welcome to the OSIsoft Security Group!

Loading...

This user group is here to exchange information and best practices related to mitigating security risks and tightening security. We hope to share and learn. We will be making regular posts about PI System security. If you would like to be notified about new posts, please Follow this site or join the group. We look forward to your feedback. And please, feel free to share your thoughts and questions through your own blogs or status posts.

Ask Security

Loading...

Ask a question in this group

Loading...

Recent Activity

Filter

Set as default view

Filtered by:All Items

Shared by Bryan Owen

from Bryan Owen's Blog2 weeks ago (Show more Show less)

DefCon25 - Breaking Wind: Adventures in Hacking Wind Farm Control Network

Wind power is now an important energy source for the electric grid and this continues to be an exciting time in history for all renewables. What could go wrong? University of Tulsa conducted a 2 year red team review on five U.S. based wind farms with 1000+ wind turbines. The research covered multiple equipment models from five major vendors. … (Show more Show less)

0 comments

Jarita Sirois

in Security3 weeks ago (Show more Show less)

Watch out for Fish Tanks!

A friend sent me a very interesting article. An internet-connected fish tank let hackers into a casino's network - Help Net Security “Smart devices are often purchased and introduced into corporate networks by employees without the involvement of the IT or security team, opening an easy route into the network for attackers to exploit,” Darktrace… (Show more Show less)

in SecurityLike Show 0 Likes(0)

0 replies

Shared by Bryan Owen

from Bryan Owen's Blog3 weeks ago (Show more Show less)

Anti-Virus is dead. Long live anti-virus! (redux)

Anti-virus has been declared dead many times. Makers of AV engines themselves even say so. Why? Because AV is a feedback control. There is always some lag time as AV isn't really designed to protect patient zero. Modern viruses mutate on the fly and as a result traditional AV effectiveness is quite limited. Whitelisting approaches, like… (Show more Show less)

0 comments

Shared by Bryan Owen

from Bryan Owen's Blog3 weeks ago (Show more Show less)

"The Coffee Break" % reddit Tales from Techsupport

This 'Coffee Break' scenario is all too likely today. Technical support and their remote monitoring system are heroes in this story! https://www.reddit.com/r/talesfromtechsupport/comments/6ovy0h/how_the_coffeemachine_took_down_a_factories/ I also like the gentle reminder that control system networks are vulnerable to run of the mill malware… (Show more Show less)

0 comments

Shared by Bryan Owen

from Bryan Owen's Blog1 month ago (Show more Show less)

Part II: OSIsoft and NERC CIP-013, Cyber Security Supply Chain Risk Management

The revised NERC CIP-013 draft standards for Cyber Security Supply Chain Risk Management appear on course to meet FERC’s deadline. However, FERC itself appears to be in transition with Acting Chair Cheryl LaFleur as the lone commissioner. Nominations for commissioners and confirmation dates are unclear at this time (as is climate for increased… (Show more Show less)

0 comments

lmlcoch

in Security1 year ago (Show more Show less)

Coresight Squared – What’s next? Kerberos and more..

Coresight Squared This series consists of three parts: 1. Server Core Installation and Configuration 2. PI Coresight Installation 3. Extras: Kerberos and more << you're here! At this point, Coresight Squared is ready to rock. But what’s next? Surely we can’t end here! Meet everyone’s favorite three headed friend – Kerberos.… (Show more Show less)

in SecurityLike Show 12 Likes(12)

7 commentsShow more activityShow more activity

guilhermetsa

2 months ago (Show more Show less)

Hi Lubos Mlcoch! In the LiveLibrary, it is stated that we should disable kernel mode when using domain account: PI Vision So, it isn't very clear for me if I should or shouldn't... Regards

Like Show 0 Likes(0) Actions

tmcmanus mentioned Security 3 months ago Show mention context Hide mention context

Re: RPC Client

tmcmanus mentioned Security 3 months ago

Hi Vint, Great question - thanks for bringing this to our attention. I've looped in our Security Team (Security ) to help out with your question to ensure we can give you a qualified answer. An initial smoke test by Harry Paul revealed no issues in terms of PI communication, specifically regarding Coresight to the PI Data Archive, but ourPreview Hide preview

Shared by Jarita Sirois

from Andre Johnsen's Blog3 months ago (Show more Show less)

(PI) Security update

Intro I figured it’s about time to write an updated version of my PI System Security blog. OSIsoft has done a lot of changes on security since 2014. First we can take the question, why do you need to restrict the security for your data down to departments, service accounts, administrators, who has read/write access? Security today isn’t just… (Show more Show less)

0 comments

Brian

in Security4 months ago (Show more Show less)

Cyber Security, PI and IoT! UC 2017

The OSIsoft Users Conference 2017 was a great event. If you weren't able to attend, all of the papers are available online for you to see. I'd like to highlight those with cyber security related information. Please review them and share. Feel free to comment or post questions here in the forum. We'd enjoy your feedback and discussion. … (Show more Show less)

in SecurityLike Show 0 Likes(0)

0 comments

Bryan Owen

in Security5 months ago

For those attending OSIsoft User Conference 2017, be sure to catch up with Andrew Ginter, author of "SCADA Security - What's Broken and How to Fix It". His provocative book description on Amazon reads:

Modern attacks routinely breach SCADA networks that are defended to IT standards. This is unacceptable. Defense in depth has failed us. In "SCADA Security" Ginter describes this failure and describes an alternative. Strong SCADA security is possible, practical, and cheaper than failed, IT-centric, defense-in-depth. While nothing can be completely secure, we decide how high to set the bar for our attackers. For important SCADA systems, effective attacks should always be ruinously expensive and difficult. We can and should defend our SCADA systems so thoroughly that even our most resourceful enemies tear their hair out and curse the names of our SCADA systems' designers.

Andrew might be right. IT security isn't looking too sharp after browsing a TTP report on FBI fugitive Alexey Belan. (Yahoo)https://medium.com/@chrismcnab/alexseys-ttps-1204...

Alexsey's TTPs
Mike Arpaia and I flew out of JFK on the morning of January 22nd, 2012. We were gainfully employed by NCC Group and responding to a breach that a client had suffered. Mike and I spent a week pouring over forensic artifacts and soon identified the perp as a Russian-speaking hacker called "M4g".
Medium

• Like Show 0 Likes(0)

0 comments

Load more items

Recent Content Tagged with Security

Loading...

Upcoming Events

Loading...

You can't create events here, but watch for events you might be interested in.

Popular Tags

Loading...

administration
audit
conference
coresight security
cyber_security
digital bond
github
pi devclub
pi security
pi system administration
pisecurityaudit
powershell
s4x17
security
security cybersecurity

View all

Actions

Loading...

Group feeds

Edit Place Overview Page

Manage

Security Links

Featured Content

Recently Joined

Welcome to the OSIsoft Security Group!

Ask Security

Recent Content Tagged with Security

Upcoming Events

Popular Tags

Actions