| Real-time business practices require copious amounts of data directly from the production assets. This new thirst for accurate and timely data has forced the convergence of the traditionally business-focused information technology (IT) environment with the production-focused operational technology (OT). This research project explores the application of software-defined networking (SDN) within OT networks.;The research found numerous differences between IT and OT network requirements as well as significant differences in priorities and approach to cybersecurity. The SDN methodologies benefit OT networks with enhanced situational awareness, centralized configuration, deny-by-default forwarding rules, and increased performance. Arguably, SDN brings the negative possibilities of an enlarged attack surface, increased complexity, and reduced reliability. While these negative implications were found to have partial or full mitigation strategies, some proponents of SDN contend that properly implemented SDN in an OT environment presents a reduced attack surface, decreased complexity, and enhanced reliability. The overall effects on OT personnel were found to be a net positive based on better situational awareness and ease of network design, implementation, and maintenance.;This research concluded that management must find a way to align the IT and OT teams in support of cybersecurity for the entire organization. Implementation of SDN presents an opportunity to meld the IT / OT cultures while enhancing overall cyber-resiliency. While more research and testing of SDN technologies in OT environments is needed, the preponderance of existing research indicates that SDN is a powerful tool for enhancing OT cybersecurity. |
