Industrial manufacturers have come to rely a great deal on radio frequency (RF) protocols in their day-to-day functioning. From simple operations such as turning on a motor to more intricate functions like manoeuvring a heavy-duty vehicle, RF forms an integral part of the smooth running of industry.
Signals are sent over the air, which provides an opportunity for cyber criminals and attackers who are equipped with the right RF tools to possibly intercept or commandeer industrial machines and systems. This is a particularly frightening thought when considering that among others, radio frequencies can be used to control cranes, drills and even help miners navigate where they are.
“Trend Micro has done some extensive research into the threats that could compromise RF remote controllers and compiled a research report titled A Security Analysis of Radio Remote Controllers for Industrial Applications. The research has found that it is quite possible to launch a cyber-attack both within and out of RF range. Considering the extensive use of machinery using RF remote controllers, the consequences of such breaches are horrifying,” says Indi Sirinwasa, vice president of Trend Micro, Sub-Saharan Africa.
RF devices are not generally designed with cybersecurity in mind, which is precisely what makes them fair game for malicious actors if they are not properly patched. Industrial machinery tends to have long lifespans and the cost of replacement can be prohibitive. Patching the systems can also be intricate, making it difficult for equipment to be properly secured from attack.
“Industry 4.0 is on the horizon and it will bring us greater connectivity across a multitude of platforms and equipment. This security gap with RF remote controllers poses a massive security risk for a great number of businesses and government institutions. And, it’s often an area that is grossly overlooked when it comes to cybersecurity,” Siriniwasa explains.
System integrators can begin by making their clients aware of the weak points in RF and encourage them to adopt virtual fencing features, which effectively switches off the devices once they are out of range. This cuts down the possibility of remote attack, however, a hacker on site or in range could still gain access through a transmitter and launch an attack.
Increasing security means most likely turning away from proprietary RF protocols and adopting open and standard protocols. It is also important to make sure that configurable pairing in one form another is also available before purchasing any device.
“Changing the fixed ID code every now and again is also a good idea. If possible it’s best to keep the programming computer off the network and failing that, securing it in the same way you would a critical end point. Bluetooth Low Energy is something else to adopt and tamper proof mechanisms also go a long way to prevent reverse engineering. As we fast approach the future of digital industry, security needs to be a foremost concern,” concludes Siriniwasa.
The full report can be downloaded at https://documents.trendmicro.com/assets/white_papers/wp-a-security-analysis-of-radio-remote-controllers.pdf
© Technews Publishing (Pty) Ltd. | All Rights Reserved.
printer friendly version