Adopting security routines in legacy organizations
Ernani Azevêdo, Marcos Machado, Rodrigo Teixeira de Melo, Rafael Roque Aschoff, Djamel Fawzi Hadj Sadok, Ubiratan Carmo · 2016
Security is a well-known critical issue and exploitation of vulnerabilities is increasing in number, sophistication and damage. Furthermore, legacy systems tend to offer difficulty when upgrades are needed, specially when security recommendations are proposed. This paper presents a strategy for legacy systems based on three disciplines which guide the adoption of secure routines while avoid production drop. We present a prototype framework and discuss its success in providing security to the network of a power plant.