ICS Security
Thoughts on the on-going global cyber attacks as they affect ICSs
Industrial Control Systems face a persistent and worsening cyber threat that existing standards fail to fully address. According to Joseph Weiss, PE, CISM, CRISC and ISA Fellow, malware such as CrashOverride, BlackEnergy, and Havex has targeted…
ICS cybersecurity experts: back up all your data to protect yourself against Petya ransomware
Petya ransomware spreads by exploiting the EternalBlue vulnerability in Microsoft Windows, the same flaw used by WannaCry weeks earlier. ICS cybersecurity experts, including Dr. Ulrich Lang of ObjectSecurity, Edgard Capdevielle of Nozomi Networks, and Bryan Singer…
How will ICS cybersecurity standards be impacted by IIoT?
The Industrial Internet of Things (IIoT) poses direct questions for ICS cybersecurity standards. The ISA99 committee, which governs the ISA and IEC 62443 series, has identified over 500 normative security requirements, with at least 125 addressing…
Securing Industrial IoT: There is no simple answer
Securing Industrial IoT (IIoT) is harder than securing traditional IT systems because IIoT devices, which include Industrial Control Systems (ICS), Operational Technology (OT), building automation, sensors, and embedded systems, follow no single security standard. They often…
Five cybersecurity experts about CrashOverride malware: main dangers and lessons for IIoT
CrashOverride, also called Industroyer, is an extensible Industrial Control Systems attack platform that ESET and Dragos reported was used against critical infrastructure in Ukraine. The National Cybersecurity and Communications Integration Center (NCCIC) worked with partners to…
Addressing the Threat of Ransomware
Recently there was a global ransomware cyberattack as never seen before. This single attack affected more than 200 000 computers and wreaked havoc on financial institutions, healthcare organizations and transportation to name just a few. This…
The Industrial Internet of Things & Network Security Standards
Just about everything is connected: from cell phones and wearable devices to cars, refrigerators and industrial equipment. IT experts have long recognized this global connectivity will only continue to skyrocket. Connectivity adds convenience to our jobs.…
CEO Insights: Four major challenges in protecting ICS from cyber attacks
Protecting Industrial Control Systems from cyber attacks presents four distinct challenges, according to Barak Perelman, CEO of Indegy, in an interview with IIoT World Managing Editor Lucian Fogoros. ICS technologies predate cyber defenses, having been built…
CEO Insights with Dr. Ulrich Lang: Customers are not aware yet of ICS security risks that IIoT Apps bring
IIoT applications introduce serious ICS security risks to manufacturing, energy, oil and gas, chemical, and transportation industries, according to Dr. Ulrich Lang, Co-founder and CEO of ObjectSecurity. In this interview, Dr. Lang explains that most customers…
The impact of WannaCry on industrial control systems (ICS)
WannaCry ransomware, which exploited the Microsoft SMBv1 vulnerability known as MS17-010, posed a severe threat to industrial control systems (ICS). Brad Hegrat, IOActive's Director of Advisory Services, warns that ICS environments are especially vulnerable because NetBIOS…
Using DNS to Defend Against IoT Botnets
Sometimes cyberattacks come from a direction you weren’t really expecting. We all know about threats from ransomware, nation-state actors, industrial espionage, or hacker collectives looking for personally-identifiable information (particularly for credit cards). But we probably weren’t…
2017 – the “silence before the storm” when it comes to ICS breaches
Cyberespionage is now the most common type of attack seen in manufacturing, the public sector and now education, warns the Verizon 2017 Data Breach Investigations Report, which was published a week ago. Much of this is…