Panel Builder System Integrator

December 12, 2018

By: Pascal Ackerman, Rockwell Automation

You have a strong industrial security program in place. You’ve cleaned up with good cyber hygiene and have implemented intrusion detection systems to avoid future incidents. But in the complex world of cybersecurity, you can’t stop there.

Despite all your efforts, latent advanced persistent threats (APTs) are still a concern. They are slowly at work trying to find chinks in your armor and exfiltrate data, bogging down your operations. And intrusion detection isn’t going to catch this activity.

You’re Ready for Threat Hunting

Threat hunting is one of the next logical steps in your cybersecurity program. In its simplest form, you are searching the network for external threats or intrusions that went undetected by automated security systems. It is a very scalable exercise and can be done with varying degrees of automation, including none at all.

It can not only further protect your proprietary recipes and information, but it also has great potential for improving operational efficiencies as well. While this practice isn’t entirely new to the IT space, it is making its way into OT environments. And this is where beverage and food production can benefit the most.

Threat hunting is proactive, and takes a step back from the scanning tools, traps and future-focused infrastructure already in place. In an age of technology, it uses gray matter to uncover malicious activity and infiltrations that have been hiding in your network for months, maybe years. And further, it can find correlations not otherwise detectable between network activity and production inefficiencies.

Infestations Wreaking Havoc in Unexpected Ways

Have you noticed your mixer acting up? Are HMIs locking down? A label printer flashing errors?

It can start with an operator charging their unprotected phone in an open USB port on the network. Months later, your oven starts acting up and won’t maintain set parameters, even though mechanically, there’s nothing wrong.

Careful review of network logs uncovers that each time the oven acts up, there are beacons going to an outside IP address. This correlation is otherwise undetectable, and is what makes the human factor critical, and threat hunting so valuable. 

I went into a plant once that was experiencing repeated network slowdowns on a certain shift. Proactive hunting led to the discovery that one employee’s workstation was running an undetected Bit Torrent. So, each day when they logged in at the beginning of their shift, the entire network was impacted.

Learn about managing cybersecurity risks in the food and beverage industry with smart manufacturing. Download the eBook for more (PDF).

Why Aren’t Intrusion Detection Systems Catching All of This Hidden Malware?

Most of what threat hunting uncovers appears innocent, and without context and correlation, passes detection systems as business as usual. A piece of malware can communicate with an unknown IP address, but will look similar to intended internet traffic.

There also could be SYN scans going on in the peripheral, outside the boundaries of what your security software is looking for. They sit quietly and slowly look for a hole in the network. They’re not getting refused and haven’t established outside connections yet, so they remain undetectable.

In a threat hunting exercise, you may discover that an outbound connection is coming from a process that shouldn’t be going out to the internet. Or you may find a system that wasn’t being used at the time the communication was made, indicating an infected source.

The thing is, these APTs were probably already there when you implemented your cybersecurity system. That’s because most intrusion detection and prevention programs rely on a known, good state. If the baseline it starts from has poor traffic or malware activity, it becomes part of the norm. Many publicized security breaches have fit into this category. It is only years after a breach occurred that it’s detected and the scope off the damage realized.

Getting Started

The good news is, you likely have what you need to get started. Threat hunting is easy to implement with the right partner and can be a one-time activity, or become part of an ongoing security program. Your HMIs and servers are already creating activity logs you can gather and analyze offline so there’s no stress on the network or production interruptions.

So stop relying solely on endpoint protection and virus scanners to detect if you’re vulnerable. Go hunting for infiltrations before they impact your plant floor.

Source

Changing Scene

  • Prev
  IoT Breakthrough, an independent organization that recognizes the top companies, ...
Humber College and SICK are entering into a three-year partnership agreement designed to build ...
  During its world Congress, held in Amsterdam, both the AIPIA President and its Chief ...
Seneca and KUKA Canada Ltd have signed a Memorandum of Understanding to provide Seneca students ...
JMP Solutions, industrial technology partner to the Fortune 1000, announced today that they have ...
  Through the use of IIoT to connect wireless pushbuttons in the field to ERP inventory ...

 

6 FAQs about HARTING Connectors on UL 508A Panels

Harting-PBSI-Mar28-ADVERTORIAL-6-FAQs-UL-508A_Ad_0078_Kerrwil_175x120_FEB2018 (004).jpg

Using connectors on UL 508A cabinets used to be a huge hassle for the panel-builder. As a result, they often chose the older hardwiring solution in the past. Now, HARTING, in partnership with UL, has made it possible to easily connectorize UL 508A panels with existing HARTING products. Get the asnwers for the six FAQs HERE.

 

 

 

One of Canada’s largest wastewater treatment plants at Annacis Island provides secondary treatment to approximately 175 billion litres of wastewater every year for over 1 million residents in 14 municipalities. After almost 20 years in operation, the variable frequency drives supporting the critical pumping systems for the primary treatment and secondary treatment facilities had to be replaced to ensure that the plant’s high operational availability and reliability will not be compromised in serving the plant, the surrounding municipalities and the environment. Metro Vancouver Regional District chose to deploy Rittal’s enclosure and power distribution solutions with E-plan software to efficiently support vital infrastructure improvements by reducing equipment replacement times and thereby minimizing risk to plant operations.

Peers & Profiles

  • Prev
Duncan Instruments Canada is celebrating their 50th year by inviting their Customers to their ...
Germain Lamonde, President and founder of EXFO, is this year’s EY Entrepreneur Of The ...
  In a recent sit-down Electrical Industry Canada was able to learn a little ...
  Few industrial innovations have weathered the years as well as heavy duty connectors. ...
As our population grows and consumers continue to rely on technology for both essentials and ...
  Engineers play a key role in the advancement of our infrastructure and the development ...
  Kymera Systems is located in Leduc, Alberta and provides scalable IIoT solutions and the ...
  JAE Automation is proof positive that a cutting-edge, high-tech company can work with ...
  Nivek Automatisation is a forward-thinking company focused on providing advanced ...
Recently Panel Builder & Systems Integrator was invited to Rittal Canada’s Head ...

 

Siemens is setting the course for long-term value creation through accelerated growth and stronger profitability with a simplified and leaner company structure. The main aim of the Vision 2020+ company strategy is to give Siemens' individual businesses significantly more entrepreneurial freedom under the strong Siemens brand in order to sharpen their focus on their respective markets. Plans also call for strengthening the company's growth portfolio through investments in new growth fields such as IoT integration services, distributed energy management and infrastructure solutions for electric mobility.

Read More

 


 Like many cyclical industries, mining is reviving, driven by steady global economic growth and an increasing demand for materials to support new technologies like electric vehicles, renewable energy and mobile devices. Despite the optimism, the industry still faces major operational challenges including process efficiencies, cost control, worker health and safety, and skills gaps. To address these challenges, Rockwell Automation introduced The Connected Mine, leveraging the latest enabling and digital technologies.

Utilizing advanced analytics, The Connected Mine helps mining companies collect and aggregate data to gain end-to-end visibility into their operations and make informed business decisions to improve mining operations.

Read More

 

Cybertech developed the Process Control and Safety Instrumented System Auditor to identify high-risk misalignments between plant process control and safety systems – and provide sufficient guidance to each plant system owner to resolve material issues.

Computerized data analytics are effective in mining the big data found in a typical process facility. The Cybertech System Auditor accepts native data from plant systems, cleans up and standardizes the data with purpose-built C# data mining applications and SQL data manipulation. Tiered SQL views minimize data duplication and facilitate automatic updates when base native data changes (e.g. after a system owner advises that they have resolved identified issues).

Read More

Product News

  • Prev
Balluff’s newest I/O hubs deliver M8 quick connect to enable resilient distributed modular ...
TE Connectivity (TE) has annouced the new SOLARLOK PV Edge decentralized junction box, ...
Wi-Fi network planning and deployment can be a daunting task for most business operators. Network ...
A compact, low cost, and versatile AC Drive that is easy to program and ideal for OEM’s. ...
Toshiba’s AS3 UL Type 12/IP55 adjustable speed drive is designed to withstand harsh ...
AutomationDirect has added a new line of AC variable frequency (VFD) drives for motor speed control ...
A new graphical user interface, increased ergonomics and enhanced macro technology are all ...
QS18 Expert photoelectric sensors are now available with IO-Link—enabling powerful benefits ...
B&R makes it easier to create safety applications with a series of new mapp functions in  ...
Building an Enterprise IIoT product starts with getting your device online. RevoEdge makes this ...
Kerrwil Publications

538 Elizabeth Street, Midland,Ontario, Canada L4R2A3 +1 705 527 7666
©2019 All rights reserved

Use of this Site constitutes acceptance of our Privacy Policy (effective 1.1.2016)
The material on this site may not be reproduced, distributed, transmitted, cached or otherwise used, except with the prior written permission of Kerrwil