Recently documented cyber incidents, such as Havex and its predecessors, show that attacks on CNI have significant real-world effects. Additionally, according to a report from the US Department of Homeland Security(1), in the first half of fiscal year 2013, (October 2012–May 2013), the highest percentage of incidents (53%) reported to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) occurred in the energy sector.
This highlights how important guarding these systems against security risks is, and one indication of how seriously these threats are being taken is the issuing of Executive Order 13636 by President Obama in 2013, which focused on improving the cyber security of critical infrastructure.
Previously, operational technologies (OT) and the corporate IT network were kept separate. However, in today’s hyper connected world, in order to improve productivity, profitability and efficiency, they are now linked. This is a tremendous benefit, but also creates new security vulnerabilities, leading to significant potential threats of infiltration or malicious command and control attempts where an attacker seeks to influence how a system operates.
Until now, keeping this network secure to a degree which instilled confidence required a technology solution previously unavailable. Using a hardware-based solution, IndustrialProtect now enables this secure link between the corporate network and the industrial processes system. This supports real-time, safe exchange and verification of trusted, authorized data travelling between operational technology systems and corporate IT using a secure “network segmentation gateway.”
Jim Anderson, President of the Americas at BAE Systems Applied Intelligence, said:
“At a time when awareness of cyber threats has increased, BAE Systems Applied Intelligence continues to leverage its security heritage to help organizations, such as energy or utility companies that operate at the heart of our national infrastructure, manage the risk associated with combining their IT and OT networks.
“First, IndustrialProtect offers integrated security capabilities for systems that were historically separated, into a single device so that organizations can increase automation without increasing operational risk. Second, it provides a means where organizations can now share their operational information with IT systems without increasing their risk of losing operational control. Lastly, IndustrialProtect gives organizations the ability to manage the risk associated with vendor access to their networks.
“Since we have seen that threats can come from both internal and external sources, it is crucial that systems are protected from access, manipulation and control by those intending to carry out harm through disruption or sabotage.”
IndustrialProtect verifies the identity of the individual or system sending information, that the information is received as it was sent (and has not been changed) and also that the content is intended and appropriate for the receiving system.
Key features of IndustrialProtect include:
- Military-grade technology, originated from BAE Systems Applied Intelligence’s national security heritage, specifically designed to be fit for purpose for industrial environments - rather than an off-the-shelf IT solution adapted for operational technology
- Hardware that provides higher performance, reliability and security than solutions based on mainstream software components
- Enablement of true automation, which is a two-way exchange of information between the industrial system and corporate IT
- Network segmentation without breaking critical business processes
- Prevention of unauthorized systems from exchanging information
- Ends -
Jena Murphy, US PR Manager, BAE Systems Applied Intelligence:
Tel: 001 617-235-8862
Mobile: 001 617-513-0265
Eric Hazard, Articulate Communications on behalf of BAE Systems Applied Intelligence:
Tel: 001 212-594-5502
Mobile: 001 917-664-9434
About BAE Systems and BAE Systems Applied Intelligence
At BAE Systems, we serve the needs of our customers by delivering a wide range of advanced defence, aerospace and security solutions that provide a performance edge. We work together with local partners to develop, engineer, manufacture and support the innovations that increase defence sovereignty, sustain economies and safeguard commercial interests. With some 84,600 employees in six continents, we are committed to creating solutions that protect and strengthen nations, commerce, communities and people.
BAE Systems Applied Intelligence is a business division of BAE Systems that delivers solutions that help clients to protect and enhance their critical assets in the intelligence age. Our intelligent protection solutions combine large-scale data exploitation, ‘intelligence-grade’ security and complex services and solutions integration. We operate in four key domains of expertise: cyber security, financial crime, communications intelligence and digital transformation.
Leading enterprises and government departments use our solutions to protect and enhance their physical infrastructure, mission-critical systems, valuable intellectual property, corporate information, reputation and customer relationships, competitive advantage and financial success.
For further information about BAE Systems Applied Intelligence, please visit www.baesystems.com/ai