IoT will transform industrial security

Issue 7 2020 Cyber Security

The digitalisation of industrial infrastructure is underway and 55% of organisations globally are confident that the Internet of Things, as one of its key aspects, will change the state of security in industrial control systems (ICS). According to Kaspersky’s recent report, ‘The State of Industrial Cybersecurity in the Era of Digitalization,’ 20% of organisations have already prioritised IoT-related incidents but solutions effective against IoT threats are yet to become widespread.

Industrial organisations continue to implement digitalisation and Industry 4.0 standards. Even despite the market slowdown as a result of the coronavirus pandemic, digitalisation is still being adopted. For instance, McKinsey & Company’s recent research revealed that 90% of manufacturing and supply chain professionals plan to invest in talent for digitalisation. Their research also shows that companies, where such projects had already been introduced, feel more confident during crises.

At the same time, the growing number of digitalisation projects, such as industrial IoT (IIoT), raises awareness of the associated risks. For one in five companies globally (20%), attacks on IIoT have already become one of their main cybersecurity concerns, bypassing such serious threats as data breaches (15%) or attacks on the supply chain (15%). Addressing them increasingly requires security professionals’ involvement, not just IT teams. In 2020, in almost half of the enterprises surveyed, IT security personnel are working on initiatives to protect digitalised OT systems (44%).

The report showed that today, however, not all organisations may feel ready to face threats to IoT. Thus, only 19% of companies globally have implemented active network and traffic monitoring, and 14% have introduced network anomaly detection – these solutions allow security teams to track anomalies or malicious activity in IoT systems.

“While industrial enterprises will only increase the implementation of connected devices and smart systems, they should strive for the same efficiency level when it comes to protection. To achieve this, protection should be built-in when a project is initiated, and for some companies, it should be done today. IIoT components must be secure at their core to eliminate the possibility of an attack on them. Along with traffic protection and other technologies, this makes the entire system secure by design and this means it becomes immune to cyber-risks,” commented Grigory Sizov, head of the KasperskyOS business unit, Kaspersky.

To ensure IIoT systems are used effectively and safely, Kaspersky experts provide organisations with the following advice:

• Consider protection at the very beginning of IIoT implementation by using dedicated security solutions. For example, the Kaspersky IoT Infrastructure Security solution is designed to safeguard industrial and business networks for IoT devices – including smart meters, controllers and others. Its key element is Kaspersky IoT Secure Gateway, based on KasperskyOS.

• Assess the status of a device’s security before its implementation. Preferences should be given to devices that have cybersecurity certificates and products from those manufacturers that pay more attention to information security.

• Conduct regular security audits and provide the security team responsible for protecting IoT systems with up-to-date threat intelligence.

• Establish procedures for obtaining information on relevant vulnerabilities in software and applications, and available updates to ensure proper and timely responses to any incidents. ICS Threat Intelligence Reporting service provides insights into current threats and attack vectors, as well as the most vulnerable elements in OT and industrial control systems and how to mitigate them.

• Implement cybersecurity solutions designed to analyse network traffic and detect anomalies and prevent IoT network attacks, then integrate the analysis into the enterprise network security system. Kaspersky Machine Learning for Anomaly Detection analyses telemetry and identifies any suspicious actions in the network before it causes any damage.

To read the full report, go to https://ics.kaspersky.com/the-state-of-industrial-cybersecurity-2020/




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Understanding the evolving cybersecurity landscape
Issue 6 2021, Vox , Cyber Security
Given the global disruption that took place last year, it is hardly surprising that malware increased by 358% and ransomware by 435% as compared to 2019.

Read more...
Security for operational technology: Part 2
Issue 6 2021, Wolfpack Information Risk , Editor's Choice, Cyber Security, Industrial (Industry)
The recent cyber-attack on Transnet is a wake-up call that South African companies are not immune from cyber threats. The incident impacted logistics on a national scale.

Read more...
Your people, the first and last line of defence
Issue 6 2021, Gijima Specialised Solutions (GSS) , Cyber Security
The human element should never be underestimated in cybersecurity planning as a simple ‘innocent’ click by an employee can open a loophole for cybercriminals to access the whole organisation’s network system.

Read more...
The bold decisions CISOs need to make today
Issue 6 2021 , Cyber Security
CISOs are entering a golden period of opportunity to take decisive action to shape their security strategy for the future of work, says Kevin Brown, managing director, BT Security.

Read more...
VMware accelerates customers’ journey to Zero Trust security
Issue 6 2021 , Cyber Security
VMworld 2021 sees new VMware security innovations empower customers with better security for apps that is more effective and easier to use.

Read more...
Cyber criminals adapt to deceive
Issue 6 2021, J2 Software , Cyber Security
Implementing DMARC standards can protect your brand from being impersonated, maintaining open communication and a managed user awareness training programme will help your people identify attacks before they lead to compromise.

Read more...
People as a risk factor
Issue 6 2021 , Cyber Security
To put it bluntly, people are the weakest link at the organisation. The distributed working environment has made implementing effective security solutions an incredibly complex undertaking.

Read more...
Protecting business from ransomware at the edge
Issue 4 2021 , Cyber Security
It might not always be possible to prevent ransomware from infecting remote networks, however, a robust backup and disaster recovery strategy can get the business back on track if systems are locked down.

Read more...
How safe are our factories?
Issue 5 2021, Wolfpack Information Risk , Industrial (Industry), Cyber Security
In this, the first part of a series on cybersecurity for operational technology, Bryan Baxter asks how safe our factories are from cyber threats.

Read more...
Managing a breach or ‘dirty’ network
Issue 5 2021 , Editor's Choice, Cyber Security
Nasser Bostan, head of security sales, Middle East and Africa, BT, shares BT’s insights gleaned from the SolarWinds incident and offers recommendations for organisations to step up their cybersecurity strategies.

Read more...