Virtualisering inom industriella informations- och styrsystem

Virtualization is emerging as convenient and attractive for the industrial control system community. There are however, a need for security related considerations regarding the transition from a traditional to virtualized operation of a computing environment. This report presents the main types of virtualization and their related security challenges. With that in mind, a number of security related recommendations aimed at system owners and operators of industrial control systems are formulated. The study concludes that virtualization implicates organizational, as well as technological challenges and that supplier dependencies requires careful considerations. This further indicates the need of planning regarding issues of liability, incident handling respectively risk and vulnerability analysis.