Edit Place Overview Page

Choose a layout and drag widgets onto your Overview Page to customize it. Widgets placed on the page below can be configured by selecting the symbol.

Dismiss this customization messageDon't show me this again.

All Places >

Security

Actions

About Security

Overview
Content
People
Projects
Events
More

Share group

Manage

Security Links

Loading...

Ethical Disclosure Policy

PI Security Tech Support

YouTube: Securing PI

Recently Joined

Loading...

Cswann Joined Jun 21, 2017
LalBabuShaik Joined Jun 12, 2017
yevgeni.nogin Joined Mar 30, 2017

View all members

Welcome to the OSIsoft Security Group!

Loading...

This user group is here to exchange information and best practices related to mitigating security risks and tightening security. We hope to share and learn. We will be making regular posts about PI System security. If you would like to be notified about new posts, please Follow this site or join the group. We look forward to your feedback. And please, feel free to share your thoughts and questions through your own blogs or status posts.

Ask Security

Loading...

Ask a question in this group

Loading...

Recent Activity

Filter

Set as default view

Filtered by:All Items

lmlcoch

in Security11 months ago (Show more Show less)

Coresight Squared – What’s next? Kerberos and more..

Coresight Squared This series consists of three parts: 1. Server Core Installation and Configuration 2. PI Coresight Installation 3. Extras: Kerberos and more << you're here! At this point, Coresight Squared is ready to rock. But what’s next? Surely we can’t end here! Meet everyone’s favorite three headed friend – Kerberos.… (Show more Show less)

in SecurityLike Show 12 Likes(12)

7 commentsShow more activityShow more activity

mhostetler

6 days ago (Show more Show less)

Please note that for Resource Based delegation, while you do not need Domain Admin permissions, you DO need "Write account restrictions" access to the User or Computer AD Object:

Like Show 0 Likes(0) Actions

tmcmanus mentioned Security 1 month ago Show mention context Hide mention context

Re: RPC Client

tmcmanus mentioned Security 1 month ago

Hi Vint, Great question - thanks for bringing this to our attention. I've looped in our Security Team (Security ) to help out with your question to ensure we can give you a qualified answer. An initial smoke test by Harry Paul revealed no issues in terms of PI communication, specifically regarding Coresight to the PI Data Archive, but ourPreview Hide preview

Shared by Jarita Sirois

from Andre Johnsen's Blog2 months ago (Show more Show less)

(PI) Security update

Intro I figured it’s about time to write an updated version of my PI System Security blog. OSIsoft has done a lot of changes on security since 2014. First we can take the question, why do you need to restrict the security for your data down to departments, service accounts, administrators, who has read/write access? Security today isn’t just… (Show more Show less)

0 comments

Brian

in Security3 months ago (Show more Show less)

Cyber Security, PI and IoT! UC 2017

The OSIsoft Users Conference 2017 was a great event. If you weren't able to attend, all of the papers are available online for you to see. I'd like to highlight those with cyber security related information. Please review them and share. Feel free to comment or post questions here in the forum. We'd enjoy your feedback and discussion. … (Show more Show less)

in SecurityLike Show 0 Likes(0)

0 comments

Bryan Owen

in Security3 months ago

For those attending OSIsoft User Conference 2017, be sure to catch up with Andrew Ginter, author of "SCADA Security - What's Broken and How to Fix It". His provocative book description on Amazon reads:

Modern attacks routinely breach SCADA networks that are defended to IT standards. This is unacceptable. Defense in depth has failed us. In "SCADA Security" Ginter describes this failure and describes an alternative. Strong SCADA security is possible, practical, and cheaper than failed, IT-centric, defense-in-depth. While nothing can be completely secure, we decide how high to set the bar for our attackers. For important SCADA systems, effective attacks should always be ruinously expensive and difficult. We can and should defend our SCADA systems so thoroughly that even our most resourceful enemies tear their hair out and curse the names of our SCADA systems' designers.

Andrew might be right. IT security isn't looking too sharp after browsing a TTP report on FBI fugitive Alexey Belan. (Yahoo)https://medium.com/@chrismcnab/alexseys-ttps-1204...

Alexsey's TTPs
Mike Arpaia and I flew out of JFK on the morning of January 22nd, 2012. We were gainfully employed by NCC Group and responding to a breach that a client had suffered. Mike and I spent a week pouring over forensic artifacts and soon identified the perp as a Russian-speaking hacker called "M4g".
Medium

• Like Show 0 Likes(0)

0 comments

Brian

in Security3 months ago (Show more Show less)

Cyber Security at the OSIsoft Users Conference 2017

We are busy preparing for the OSIsoft Users Conference next week. Hoping to see you there, we would like to share the security related activities happening during the conference. Here are some suggestions for your conference agenda: Day Time Agenda Tue 2:30 PM Security Discussion Forum Tue 4:15 PM Security in Your IoT Networks… (Show more Show less)

in SecurityLike Show 0 Likes(0)

0 comments

dchia

in Security4 months ago (Show more Show less)

Oceania Lunchtime Webinar Series: Cyber Security and the PI System Q&A

Q: So Applocker only applies to apps a "user" tries to run, doesn't apply to background services? A: Yes, Applocker dll and exe rules are ignored when Windows starts a background service. In a sense, the PI services are whitelisted by administrators when installed. As a next step, we may be able to develop code integrity policy for the newest…

in SecurityLike Show 2 Likes(2)

0 comments

Brian

in Security4 months ago (Show more Show less)

Security Certification

While the S4X17 ended without Pie in the face of the attending security advisors, we did have a number of other appearances. Recently posted on Digital Bond's YouTube channel is the main stage panel discussion around the topic of security certifications. Watch Bryan Owen discuss the benefits and drawbacks of security certifications. The panel… (Show more Show less)

in SecurityLike Show 1 Like(1)

0 replies

Bryan Owen

in Security4 months ago

Hello PI Square Security Group and especially members associated with the electrical sector. Please check out my open letter related to the NERC's draft CIP-013 standards.
Open letter: OSIsoft LLC and NERC CIP-013, Cyber ...

Open letter: OSIsoft LLC and NERC CIP-013, Cyber Security Supply Chain Risk Management
Supply chain risk management is an increasing

• Like Show 0 Likes(0)

0 comments

hpaul

in Security5 months ago (Show more Show less)

PI Security Audit Tools Update: new release on TS site and UC 2017 lab

An updated version of the PI Security Audit Tools is available for download from the tech support site here. For a list of the changes/improvements in this version, check out the release announcement. There is also an exciting opportunity to learn more about PI System security and baselining with the PI Security Audit Tools from Anna Perry at… (Show more Show less)

in SecurityLike Show 3 Likes(3)

2 commentsShow more activityShow more activity

hpaul

(to Bryan Owen) 5 months ago (Show more Show less)

Good question; this is a 100 level course using the Microsoft Standard Level Definitions, so expertise with PowerShell, while quite helpful, is not a hard prerequisite.

Like Show 1 Like(1) Actions

Load more items

Recent Content Tagged with Security

Loading...

Upcoming Events

Loading...

You can't create events here, but watch for events you might be interested in.

Popular Tags

Loading...

administration
audit
conference
coresight security
cyber_security
digital bond
github
pi security
pisecurityaudit
powershell
s4x17
scripts
security
security cybersecurity
windows_server_core

View all

Actions

Loading...

Group feeds

Edit Place Overview Page

Manage

Security Links

Featured Content

Recently Joined

Welcome to the OSIsoft Security Group!

Ask Security

Recent Content Tagged with Security

Upcoming Events

Popular Tags

Actions