A0008 Application Server

ICS

sectorsGeneral

platformsLinux · Windows

Application servers are used across many different sectors to host various diverse software applications necessary to supporting the ICS. Example functions can include data analytics and reporting, alarm management, and the management/coordination of different control servers. The application server typically runs on a modern server operating system (e.g., MS Windows Server).

01

related assets (8)

Related entries.

  • File Server · General

    Server designed to house files within the ICS environment and/or securely transfer files between the ICS and enterprise networks.

  • License Server · General

    Vendor-specific server that operates and maintains application licenses for different ICS applications to prevent computers from reaching across the ICS/enterprise network boundary directly.

  • Update / Patch Management Server · General

    Server capable of providing updates and/or patches to computers with general purpose operating systems (e.g. MS Windows or Linux) within the ICS environment to prevent computers from reaching across the ICS/enterprise network boundary directly.

  • Domain Controller (DC) · General

    MS Windows server used for enforcing security policies and role-based access control (RBAC) rules and managing identity and access management (IAM) policies within a network.

  • Database Server · General

    MS Windows (primarily) server used for tracking long-term point information, control sheets, license information, trends, etc. Paired with a Domain Controller and in some cases may be installed on the same machine functioning as a domain controller. MS SQL & Oracle are common types of database software found.

  • Alarm Collector · General

    Server that is a target of device/server alarms for a distributed system. Some workstations or servers may have the job as the alarm collector and may only be a process/service running on the machine.

  • Asset Management Server · General

    A vendor-specific piece of software that collects information about vendor hardware or allows for configuration of that hardware (i.e., FactoryTalk Asset Center). May also be known as: Field Device Management.

  • Telemetry Server · General

    Servers that collect Layer 2 communications or information and send via Layer 3 to other network segments or outside the control zone for collection (examples: PI Feeder, Remote Data Server).

02

techniques targeting this asset (49)

ATT&CK techniques this enables or maps to.

03

source

Where this definition is published.