Malware Classification System

This topic describes different Types of Malware encountered in IT, IACS and OT environments and the potential risks each may present.

This table indicates the relative risk that each malware type may present in IT, IACS, and OT environments.

*Definitions:

• IT systems may read plant data from IACS, analyze that data, and even recommend changes to plant equipment. However, these changes must be accomplished by humans either physically or by issuing commands through IACS systems.
• IACS, or “Industrial Automation and Control Systems”, actually adjust plant equipment and provide safety interlocks in hazardous plant environments.
• OT, or Operational Technology includes computers, networks and software that interface with IACS systems in order to adjust plant equipment, and with IT systems to receive or transmit plant data. They therefore require cooperation between IT and IACS personnel.

IT and IACS may be distinguished by the architectural levels where they are found. Specifically IT systems are found above the plant industrial firewall(s), and IACS are found at architectural levels below the plant firewall.

However, this is not the case with OT systems which exist at architectural levels above and below the plant firewall. However, OT systems are distinguished by the fact that they require the cooperation of both IACS and IT personnel to design, support, and maintain. It is therefore recommended that this distinction be useed as the definition of OT systems.

Malware Types, Risks and Mitigation Measures.

• Malware Types and the Risks Presented in IACS/OT and IT Environments