Photonics for Resilient OT Security
About This Session
Operational technology security is usually approached through firewalls, identity, endpoint monitoring, remote access, and policy enforcement. These controls are essential, but they do not address the full picture. In industrial environments, the physical communications layer also affects segmentation, availability, recovery, and incident response.
This session examines how photonic technologies and optical infrastructure can support more resilient OT security. It does not present fiber as inherently secure or as a replacement for established controls. Instead, it shows how the optical layer can add visibility, control, and operational assurance when integrated into an OT architecture.
OT environments often include legacy systems, fragile protocols, limited endpoint visibility, and systems that cannot be routinely patched, scanned, or restarted. Availability and safety are critical because poorly implemented controls can interrupt production or affect physical processes.
These constraints make segmentation especially important, but segmentation often degrades over time. Temporary connections become permanent, vendor access remains enabled after maintenance, engineering workstations gain access across multiple zones, and undocumented changes undermine the approved architecture. This creates segmentation drift, where the real network no longer matches the intended design.
The session will explore how fiber-based designs can support more durable OT zones and conduits. It will also examine optical switching as a way to create temporary, authorized paths for maintenance, contractor access, diagnostics, and OT-to-enterprise transfers. When the task is complete, the path can be removed instead of remaining continuously available.
Another focus will be optical-layer telemetry. Signal strength, link state, error conditions, component health, and path changes can provide valuable context during an incident. When correlated with network, security, and process data, this information can help teams distinguish malicious activity from physical damage, equipment failure, environmental conditions, or configuration errors.
The presentation will connect these capabilities to Zero Trust by asking practical questions: What assets are communicating? Who authorized the connection? Which path is being used? Is that path still required? Can it be observed and removed?
The session will also address limitations. Fiber can still be tapped, damaged, misconfigured, or connected to compromised equipment. Optical switching can introduce management and control-plane risks. Photonics cannot replace identity, access control, logging, monitoring, incident response, governance, or sound cyber hygiene.
Attendees will leave with a practical framework for evaluating where photonic technologies can improve OT segmentation, visibility, controlled connectivity, and recovery without creating unnecessary operational risk.
This session examines how photonic technologies and optical infrastructure can support more resilient OT security. It does not present fiber as inherently secure or as a replacement for established controls. Instead, it shows how the optical layer can add visibility, control, and operational assurance when integrated into an OT architecture.
OT environments often include legacy systems, fragile protocols, limited endpoint visibility, and systems that cannot be routinely patched, scanned, or restarted. Availability and safety are critical because poorly implemented controls can interrupt production or affect physical processes.
These constraints make segmentation especially important, but segmentation often degrades over time. Temporary connections become permanent, vendor access remains enabled after maintenance, engineering workstations gain access across multiple zones, and undocumented changes undermine the approved architecture. This creates segmentation drift, where the real network no longer matches the intended design.
The session will explore how fiber-based designs can support more durable OT zones and conduits. It will also examine optical switching as a way to create temporary, authorized paths for maintenance, contractor access, diagnostics, and OT-to-enterprise transfers. When the task is complete, the path can be removed instead of remaining continuously available.
Another focus will be optical-layer telemetry. Signal strength, link state, error conditions, component health, and path changes can provide valuable context during an incident. When correlated with network, security, and process data, this information can help teams distinguish malicious activity from physical damage, equipment failure, environmental conditions, or configuration errors.
The presentation will connect these capabilities to Zero Trust by asking practical questions: What assets are communicating? Who authorized the connection? Which path is being used? Is that path still required? Can it be observed and removed?
The session will also address limitations. Fiber can still be tapped, damaged, misconfigured, or connected to compromised equipment. Optical switching can introduce management and control-plane risks. Photonics cannot replace identity, access control, logging, monitoring, incident response, governance, or sound cyber hygiene.
Attendees will leave with a practical framework for evaluating where photonic technologies can improve OT segmentation, visibility, controlled connectivity, and recovery without creating unnecessary operational risk.
Speaker
Douglas Woolf
Principal - Dark Wolf
CISSP and CISM-certified cybersecurity architect, analyst, and researcher with 10+ years of experience delivering mission-grade security across defense, enterprise, and R&D environments. I specialize in modern, RMF-driven assessment and authorization for innovative organizations and their advanced technologies. From architecting post-quantum cryptography solutions to securing emerging photonic compute fabrics, I translate complex technical risk into clear, actionable decisions for authorizing officials and stakeholders.
