11 min read
Why Legacy ICS Protocols Have No Authentication — The Legacy of 2000s Design Decisions
Many legacy industrial control protocols were designed without authentication or integrity guarantees. This wasn't a mistake — it was a rational choice for the 2000s, premised on an air-gapped network, and this post examines how that choice became today's security debt, using open protocols (Modbus, DNP3) as examples.
Read full article