Securing Industrial Control Systems from the Inside and Out