Industrial protocols

Many of the protocols running industrial plant were designed with no authentication and no encryption, on purpose.

They date from an era when the network was physically isolated and the priority was determinism and simplicity. Nothing about them verifies who is sending a command. Retrofitting security therefore happens around them, in the network design and the access path, because the protocols themselves cannot be made to ask the question.

Checked against the primary source.

More on OT, ICS & cyber-physical