• Follow Us On : 

Trend Micro Research Identifies Critical Industry 4.0 Attack Methods


Redaksi | Selasa,12 Mei 2020 - 22:26:09 WIB
Dibaca: 392 kali 
Trend Micro Research Identifies Critical Industry 4.0 Attack Methods

Research report outlines advanced attack scenarios and recommendations for OT operators

CHINA - Media OutReach - 12 May 2020 - Trend Micro Incorporated (TYO: 4704; TSE: 4704), today released research describing how advanced hackers could leverage unconventional, new attack vectors to sabotage smart manufacturing environments.

For this report, Trend Micro Research worked with Politecnico di Milano in its Industry 4.0 lab, which houses real manufacturing equipment from industry leaders, to demonstrate how malicious threat actors can exploit existing features and security flaws in Industrial IoT (IIoT) environments for espionage of financial gain.

"Past manufacturing cyber attacks have used traditional malware that can be stopped by regular network and endpoint protection. However, advanced attackers are likely to develop Operational Technology (OT) specific attacks designed to fly under the radar," said Bill Malik, vice president of infrastructure strategies for Trend Micro. "As our research shows, there are multiple vectors now exposed to such threats, which could result in major financial and reputational damage for Industry 4.0 businesses. The answer is IIoT-specific security designed to root out sophisticated, targeted threats."

"Politecnico di Milano is fully committed to supporting Industry 4.0 in addressing crucial aspects related to security and reliability of automated and advanced controls, especially as they gain relevance in all production sectors and increasingly impact business," said Giacomo Tavola, Contract Professor in Design and Management of Production Systems and Stefano Zanero, Associate professor in Advanced Cybersecurity Topics for Politecnico di Milano.

Critical smart manufacturing equipment relies primarily on proprietary systems, however these machines have the computing power of traditional IT systems. They are capable of much more than the purpose for which they are deployed, and attackers are able to exploit this power. The computers primarily use proprietary languages to communicate, but just like with IT threats, the languages can be used to input malicious code, traverse through the network, or steal confidential information without being detected.

Though smart manufacturing systems are designed and deployed to be isolated, this seclusion is eroding as IT and OT converge. Due to the intended separation, there is a significant amount of trust built into the systems and therefore very few integrity checks to keep malicious activity out.

The systems and machines that could be taken advantage of include the manufacturing execution system (MES), human machine interfaces (HMIs), and customizable IIoT devices. These are potential weak links in the security chain and could be exploited in such a way to damage produced goods, cause malfunctions, or alter workflows to manufacture defective products.

The report offers a detailed set of defense and mitigation measures, including:

  • Deep packet inspection that supports OT protocols to identify anomalous payloads at the network level
  • Integrity checks run regularly on endpoints to identify any altered software components
  • Code-signing on IIoT devices to include dependencies such as third-party libraries
  • Risk analysis to extend beyond physical safety to automation software
  • Full chain of trust for data and software in smart manufacturing environments
  • Detection tools to recognize vulnerable/malicious logic for complex manufacturing machines
  • Sandboxing and privilege separation for software on industrial machines

About Trend Micro
Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information. Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud environments, networks, and endpoints.

All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and control, enabling better, faster protection. With more than 6,000 employees in over 50 countries and the world's most advanced global threat intelligence, Trend Micro secures your connected world. For more information, visit www.trendmicro.com.hk.

About Politecnico di Milano
Politecnico di Milano is a scientific-technological university which trains engineers, architects and industrial designers. The University has always focused on the quality and innovation of its teaching and research, developing a fruitful relationship with business and productive world by means of experimental research and technological transfer.

Research has always been linked to didactics and it is a priority commitment which has allowed Politecnico di Milano to achieve high quality results at an international level as to join the university to the business world. Research constitutes a parallel path to that formed by cooperation and alliances with the industrial system. For more information, visit www.polimi.it.


Akses Wahanariau.com Via Mobile m.Wahanariau.com
Untuk Berbagi Berita / Informasi / Peristiwa
Silahkan SMS ke nomor HP : 085271472010
atau email ke alamat : [email protected]
Harap camtumkan detail data diri Anda
Pengutipan Berita dan Foto, Cantumkan Wahanariau.com Sebagai Sumber Tanpa Penyingkatan
TULIS KOMENTAR
BERITA TERKAIT
Rabu,24 Juni 2020 - 23:00:50 WIB

Trend Micro Once Again Ranks Number One in Global Hybrid Cloud Security

Latest analyst report finds Trend Micro holds three times the market share of number two player CHI

Kamis,10 Oktober 2019 - 13:07:54 WIB

Trend Micro and Snyk Enter Strategic Partnership to Enable Software Developers to Rapidly and Securely Deliver Applications

First of its kind partnership begins with integrated shield and fix approach to open source vulnerab

Selasa,24 September 2019 - 12:48:00 WIB

Trend Micro Named a Leader in Endpoint Security

Independent research firm recognizes that Trend Micro continues to offer the most complete endpoint

Selasa,27 Agustus 2019 - 11:29:16 WIB

Trend Micro First to Deliver XDR Across Email, Network, Endpoint, Server and Cloud Workloads

Combats alert overload and maximizes security teams’ impact with broader visibility and expert

Selasa,04 Desember 2018 - 02:17:57 WIB

Trend Micro Redefines Endpoint Security with Trend Micro Apex One™

All-in-one advanced endpoint security solution automates detection & response, delivers insight

Kamis,02 Agustus 2018 - 11:48:04 WIB

Trend Micro Nurtures Global Cybersecurity Talent With 2018 Capture The Flag Event

Company encourages development of critical capabilities to address global skills shortage CHINA&nbs

BERITA LAINNYA
Sabtu,11 Juli 2020 - 23:21:43 WIB

Bupati Pelalawan Hadiri Acara Pembukaan Khatmil Quran di Kelurahan Pelalawan

PELALAWAN - Polres Pelalawan taja kegiatan Khatmil Quran (Khatam Alquran) bertempat di Mesjid Hibbah

Rabu,08 Juli 2020 - 05:58:14 WIB

Tren Penularan Covid-19 di Riau Menurun

PEKANBARU - Beberapa hari belakangan ini tren perkembangan virus corona atau Covid-19 di Provinsi Ri

Rabu,08 Juli 2020 - 05:56:08 WIB

Hasil Swab Pegawai Disdukcapil Pekanbaru Seluruhnya Negatif

PEKANBARU - Sampel swab pegawai Dinas Kependudukan dan Pencatatan Sipil (Disdukcapil) Kota Pekanbaru

BERGABUNG DI SINI
KABAR POPULER
IKUTI BERITA KAMI