Needs Security measures for industrial and production systems

OT equipment visualization and managed services

As the factory DX of recent years continues to advance through the use of clouds and IoT, the OT environment has begun to communicate with external sources like the Internet, bringing with it the need for security on par with an IT environment.

How does DX occur in the manufacturing industry?

As production efficiency has improved through conversion of factories through DX (utilization of clouds/IoT), the OT environment, which was previously closed, is increasingly being linked with the outside world.

By introducing systems such as smart factories that link IT and OT, it is possible to automate and streamline operations and improve productivity.

In addition, by visualizing information such as production rate and operating rate, it becomes easier to investigate causes when problems occur.

Do you have security measures in place for your industrial and production systems?

As with the IT environment, increased communication with the outside world presents numerous security risks to the OT environment.

In recent years, there have been many cases of attacks such as intrusions into production site systems, freezing of production systems and forcing of factories to stop.

A survey of the 10 major security threats to industrial control systems (*) shows an increasing trend in malware infections via the Internet and intranets, and attacks on external networks and cloud components.

The introduction of OT security to protect against such threats is a challenge organizations now face. How exactly, though, should we implement OT security measures in the industrial and manufacturing industries?

Do you have security measures in place for your industrial and production systems?

*	[Germany BSI] Industrial Control System (ICS) Security -10 Major Threats and Countermeasures 2019- https://www.ipa.go.jp/archive/security/10threats/bsi2019.html

OT security measure issues to be addressed

On-site asset management, understanding of network configuration and vulnerabilities

In many Japanese companies, IT and OT are clearly separated, so it is difficult to understand the overall network configuration. Additionally, system management is difficult in an OT environment with many legacy systems.

Absence of incident handling and security personnel

Because the OT environment is designed differently from the IT environment, there are many cases where there are no security experts at the production site, making it difficult to promote security measures.

Detecting external threats such as cyberattacks

Inability to detect changes or abnormalities in the system when it is hit by an external attack, such as a ransomware infection, can not only bring business operations to a halt, it can impact society itself.

Asset management of production bases located overseas

It is not easy for companies with overseas production bases to implement asset management and vulnerability countermeasures at multiple factories. There are few companies that implement OT security for all their factories and have an operation management system in place.

KDDI can make these a reality

OT Vulnerability Visualization

Provides visualization of OT assets and vulnerabilities in each system.

Visualize the vulnerabilities of an in-operation system, bringing your security risks to light without interfering with equipment operation.

OT Managed Visualization

Provides security risk visualization and reporting of analysis results, OT network communication status, information assets/vulnerabilities, and threat visualization.

We can also propose necessary measures after analyzing and evaluating the visualized data.

Countermeasure solution service Monitoring

Countermeasure solution service Monitoring

24-hour-a-day, 365-day-a-year monitoring of OT and IT environments, as well as notification for and analysis of incidents.

Security product installation, OT and IT security perimeter strengthening, 24x7x365 monitoring, and instant notification and analysis when incidents occur.

Organizational support and Operation management

Organizational support and Operation management

Centrally-manage all networks from the cloud.
Combine multiple sites into one virtual factory.

We create security regulations, policies, and guidelines for multiple sites, and provide organizational support.

Recommended products and services from KDDI Thailand

Nozomi Networks Guardian

Nozomi Networks Guardian, a cybersecurity product for industrial control systems provided by Nozomi Networks, enables centralized management, monitoring tuning and periodic database updates in environments distributed across overseas sites.

Nozomi Networks

Main features of Nozomi Network Guardian

Can be implemented without affecting existing systems
- Can be monitored in passive mode
Visualization of assets and networks
- Packet data analysis enables real-time visualization of OT environment assets, networks, protocols, and port numbers
Hybrid threat detection
- Anomaly (behavior) detection through AI automatic learning
- Detection by DPI + signature (including YARA rules/packet rules)
Compatible with various IT/OT protocols
- Supports not only common OT protocols but also ICS vendor protocols
- Can be developed to support proprietary protocols
Process state detection
- Detection and statistics of variable values (control data values) in OT communication
Forensic support and comparison functions
- Automatically save packets according to alerts and rules you set
- Snapshot function enables differential comparison between specific times

We provide optimal OT security measures!

Through the provision of visualization, countermeasures, and monitoring for OT environments, we provide security measures and support you in making your infrastructure safe and secure, all with a minimum of impact on your business activities.