IoT will transform industrial security

Issue 7 2020 Cyber Security

The digitalisation of industrial infrastructure is underway and 55% of organisations globally are confident that the Internet of Things, as one of its key aspects, will change the state of security in industrial control systems (ICS). According to Kaspersky’s recent report, ‘The State of Industrial Cybersecurity in the Era of Digitalization,’ 20% of organisations have already prioritised IoT-related incidents but solutions effective against IoT threats are yet to become widespread.

Industrial organisations continue to implement digitalisation and Industry 4.0 standards. Even despite the market slowdown as a result of the coronavirus pandemic, digitalisation is still being adopted. For instance, McKinsey & Company’s recent research revealed that 90% of manufacturing and supply chain professionals plan to invest in talent for digitalisation. Their research also shows that companies, where such projects had already been introduced, feel more confident during crises.

At the same time, the growing number of digitalisation projects, such as industrial IoT (IIoT), raises awareness of the associated risks. For one in five companies globally (20%), attacks on IIoT have already become one of their main cybersecurity concerns, bypassing such serious threats as data breaches (15%) or attacks on the supply chain (15%). Addressing them increasingly requires security professionals’ involvement, not just IT teams. In 2020, in almost half of the enterprises surveyed, IT security personnel are working on initiatives to protect digitalised OT systems (44%).

The report showed that today, however, not all organisations may feel ready to face threats to IoT. Thus, only 19% of companies globally have implemented active network and traffic monitoring, and 14% have introduced network anomaly detection – these solutions allow security teams to track anomalies or malicious activity in IoT systems.

“While industrial enterprises will only increase the implementation of connected devices and smart systems, they should strive for the same efficiency level when it comes to protection. To achieve this, protection should be built-in when a project is initiated, and for some companies, it should be done today. IIoT components must be secure at their core to eliminate the possibility of an attack on them. Along with traffic protection and other technologies, this makes the entire system secure by design and this means it becomes immune to cyber-risks,” commented Grigory Sizov, head of the KasperskyOS business unit, Kaspersky.

To ensure IIoT systems are used effectively and safely, Kaspersky experts provide organisations with the following advice:

• Consider protection at the very beginning of IIoT implementation by using dedicated security solutions. For example, the Kaspersky IoT Infrastructure Security solution is designed to safeguard industrial and business networks for IoT devices – including smart meters, controllers and others. Its key element is Kaspersky IoT Secure Gateway, based on KasperskyOS.

• Assess the status of a device’s security before its implementation. Preferences should be given to devices that have cybersecurity certificates and products from those manufacturers that pay more attention to information security.

• Conduct regular security audits and provide the security team responsible for protecting IoT systems with up-to-date threat intelligence.

• Establish procedures for obtaining information on relevant vulnerabilities in software and applications, and available updates to ensure proper and timely responses to any incidents. ICS Threat Intelligence Reporting service provides insights into current threats and attack vectors, as well as the most vulnerable elements in OT and industrial control systems and how to mitigate them.

• Implement cybersecurity solutions designed to analyse network traffic and detect anomalies and prevent IoT network attacks, then integrate the analysis into the enterprise network security system. Kaspersky Machine Learning for Anomaly Detection analyses telemetry and identifies any suspicious actions in the network before it causes any damage.

To read the full report, go to https://ics.kaspersky.com/the-state-of-industrial-cybersecurity-2020/




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

NIST’s impact on cybersecurity
Cyber Security
Through its NIST Cybersecurity Framework, the non-regulatory agency empowers organisations to take a proactive approach towards managing and mitigating cyber risks, enabling them to stay resilient against the ever-evolving threat landscape.

Read more...
Best practice tips for strengthening data privacy system
Security Services & Risk Management Cyber Security
International cybercriminals are increasingly targeting South African organizations, making data privacy more difficult to maintain. A standardization expert offers insight to help combat this threat.

Read more...
AI-powered cyber protection for consumers
IT infrastructure Cyber Security
Acronis Cyber Protect Home Office is designed for the evolving landscape of cyber threats by integrating Acronis' cyber protection and secure backup solutions, combining AI-powered defence mechanisms, robust data backup, remote management tools, and mobile device protection.

Read more...
A surge of cybersecurity for the energy sector
Government and Parastatal (Industry) Cyber Security
With a rapid transition towards renewable energy, the energy sector has an increased reliance on technology. This makes it particularly vulnerable with regards to cybersecurity, as it depends on interconnected systems and digital technologies.

Read more...
Secure backup strategies imperative for business continuity
IT infrastructure Cyber Security
Cybercrime is on the rise, and businesses need to adjust how they manage their data to fend off attackers, or risk irreparable damage, writes Lisa Strydom, Senior Manager Channel and Alliance for Africa at Veeam Software.

Read more...
CHI selects NEC XON as trusted cybersecurity partner
News Cyber Security Industrial (Industry)
CHI Limited, Nigeria's leading market player in fruit juices and dairy products, has engaged in a strategic cybersecurity partnership with NEC XON, a pan-African ICT systems integrator.

Read more...
Mitigating escalating DDoS cyberattacks
Cyber Security
As cyberattacks, particularly those of the Distributed Denial of Services (DDoS) variety, continue to rise at an unprecedented rate across Africa, it is no longer a question of ‘if’ your organisation will be targeted, but rather ‘when’.

Read more...
Six effective antidotes to modern cyber adversaries
Cyber Security
As the head of cybersecurity at NEC XON, Armand Kruger has witnessed the transformation from hooded hackers to a sophisticated dark economy that poses unprecedented threats and is run like a business.

Read more...
Key strategies for businesses in the face of cyber threats
Cyber Security Security Services & Risk Management
Businesses face severe financial and reputational consequences due to data breaches and daily website hacks, and not all organisations are adequately prepared to combat these escalating threats.

Read more...
Cyberattacks are inevitable for small businesses
Cyber Security
The recent cyberattack on Microsoft is a stark reminder that no organisation, regardless of its size or industry, is immune to cyber threats. Even small businesses, often assuming they are less attractive targets, are vulnerable.

Read more...