Utilização da arquitetura zero trust para defesa cibernética das infraestruturas críticas do setor elétrico nacional

Abstract

The implementation of Zero Trust network architecture has been used in the Industrial Control Systems (ICT) sector to defend against and prevent cyber threats or cybercrime. Given the architecture's capabilities, it is unlikely that a single compromised endpoint in zero trust networks could spread laterally, infecting the entire network, which allows us to adopt the architecture in the electricity sector. In Brazil, there is no provision in the National Critical Infrastructure Security Plan (PLANSIC) for the use of this micro-segmentation network architecture as a necessary solution for cyber defense of these infrastructures. The lack of this provision exposes your network to possible cyber-attacks and security challenges. The protection of these physical systems has been discussed due to the electricity sector being the target of cyber-attacks in contemporary conflicts. Motivated by this convergence, this document aims to present a proposal to change PLANSIC to adopt this comprehensive zero-trust security architecture to help reduce risks and help protect Brazil's physical electrical systems and ensure the continuity of this service for the entire population.