Cyber and Operational Solutions for a Connected Industrial Era

Transcription

1 Cyber and Operational Solutions for a Connected Industrial Era

2 OPERATIONAL & SECURITY CHALLENGES IN A HYPER-CONNECTED INDUSTRIAL WORLD In face of increasing operational challenges and cyber threats, and their growing scale and sophistication, industrial and critical infrastructure organizations nowadays find themselves challenged by an all-out digital revolution they were ill-prepared for and must find ways to control and secure. The explosion of connectivity in the past few years, a move to IP-based networks and remote access to previously air-gapped systems have created an attack surface where opportunity for disaster is far and wide, all while attack types and numbers are on a constant rise. The threats to critical infrastructure organizations are extensive as they are exposed to cyber threats and operational issues whilst lagging a generation behind in terms of IT security. Some of the reasons making matters complicated are: Digitization of CI systems on the most susceptible platforms exposing them a plethora of threats that leverage known and unknown vulnerabilities Increasing patterns of exploits and attacks on CI networks Collision of business and industrial networks Security for ICS/SCADA was not built-in from the get go A reluctance to stop operations in order to replace or update mission critical systems Assumed physical isolation and security by obscurity are busted myths Enterprise-grade security solutions cannot secure industrial/ci environments CIs are a prime target for hostile nations, hacktivists, cybercriminals and hackers Advanced cyber security directives/regulations are still voluntary Beyond the inherent vulnerability of industrial organizations to threats, the use of malware and unknown attack methods are evolving rapidly, as are those who perpetrate attacks. This means C O N F I D E N T I A L P a g e 2 7

3 more diverse, skilled and resource-backed adversaries coming after the backbone of the economy, which stands unprepared and exposed in face of looming disaster. Beyond IP theft, disrupting operations, and causing physical damage to mission critical systems, threats aim to and can potentially reach life-threatening situations on a large scale. CRUCIAL INDUSTRIAL OPERATIONS FACE CONSTANT ASSAULT, AND ATTACKS ARE INCREASING C O N F I D E N T I A L P a g e 3 7

4 THETARAY: CYBER AND OPERATIONAL SOLUTIONS FOR A NEW THREAT ERA To solve the security challenges for the industrial and CI sectors, ThetaRay s cyber and operational solutions transform the detection of unknown threats with Hyper-dimensional Big Data Analytics securing your infrastructure, allowing you to stop and predict threats. ThetaRay s solutions bring tomorrow s big data analytics technology to customer critical infrastructures today. The cyber and operational solutions simultaneously analyze massive big data from all data-generating highways the organization wishes to utilize, including ICS/SCADA network traffic, industrial machine data (turbines, sensors, Historian.), various database records, and HMIbased data, to name a few, finding the anomalies that spell imminent outages or unplanned downtime. The analysis points out surreptitious cyber and operational threats with laser-precision accuracy that will tell you exactly where the anomalies stem from: Holistically monitor the entire infrastructure on all its data sources Detect unknown cyber and operational threats Very low false positive rates Unsupervised analysis, non-intrusive solution Fully automatic detection No big data skills required With its unique and innovative algorithmic core, ThetaRay s Hyper-dimensional, multi-domain big data analytics has made it possible to detect threats in a purely mathematical way that is free of rules, signatures, patterns or heuristics. The detection is automatic, unsupervised, and does not require any big data skills, cutting added costs for skilled investigators and countless hours of manual querying to find threats. Automatic, seamless detection to protect your critical networks. Your security team is provided with event alerts and relevant forensics it can use to address issues and stop threats in their tracks. Threats are found within minutes, not weeks or months, and extremely low false positive rates guarantee your team does not have to investigate endless false alarms, which translates into lower costs on your bottom line. A strong balance of rapid, accurate detection of unknown threats translates into a resilient security posture fit for a new and hyper-connected industrial era. CYBER SOLUTION DETECTING UNKNOWN ATTACKS ThetaRay brings cutting edge innovation to the industrial sector, leveraging the massive amounts of mixed, heterogeneous big data that flows from every part of the business, plant, operational and machine networks, and turning it into insightful threat detection. C O N F I D E N T I A L P a g e 4 7

5 Solutions to help you shift from a reactive state to proactive security that detects threats and allows your team to mitigate them within minutes from the time they occur. Detect and defeat advanced zero day and APT attacks Detect new and mutated malware activity inside your guarded networks Promptly find out about suspicious insider activity Automatically identify, score and prioritize threats Automate reporting for regulatory compliance Predict risks and learn about security gaps way before they become issues. OPERATIONAL SOLUTION DETECTING AND PREDICTING OPERATIONAL ISSUES Beyond rendering possible the detection of threats like zero days and APT attacks, organizations using ThetaRay find out about the earliest signs of otherwise imperceptible operational faults and potential failures, enabling them to: Detect operational faults before they spell an imminent outage Predict similar threats and issues before they occur Proactively align operational continuity with all business objectives Reduce and predict staff requirements for security operations Reduce and predict overall maintenance expense Increase workforce effectiveness and minimizing unplanned downtime Maximize production, on-time performance and delivery Lower maintenance, higher availability and utilization See consistently increasing customer satisfaction Automate reporting processes to regulatory compliance systems Using Hyper-dimensional big data analytics to monitor, correlate, analyze, and take action on incisive event detection, organizations deploying ThetaRay s solutions are alerted about unknown anomalies that spell attacks and operational faults they cannot know of using rulebased solutions or defense that monitors for known threats and patterns. CUSTOMER STORIES ThetaRay customers deploy our cyber and operational solutions for a resilient security posture and predictive analytics they see rapid ROI from. Some examples follow: LARGE US-BASED ELECTRIC POWER COMPANY Challenges: Leading power gen corporation operating large, heterogeneous infrastructure Unknown source of data supplied to ThetaRay, 1 million measurements, 330 data parameters Multiple operational issues in progress go undetected by the customer C O N F I D E N T I A L P a g e 5 7

6 Solution and results: ThetaRay Hyper Dimensional Big Data analytics deployed in non-intrusive mode. ThetaRay s detection platform began monitoring all data sources, unsupervised, producing automatic detection of 4 distinct normal work modes, and 18 unique operational anomalies within the first hour of deployment. Customer s team confirms all issues and remedies rapidly. Customer goes on to using ThetaRay for predictive analytics of issues within its business and operational networks. LEADING AVIATION CORPORATION Challenges: Leading aviation corporation operating large, heterogeneous infrastructure APT attack in progress goes undetected by existing security solutions Attacker uses customized, unfamiliar malware to breach and probe the network Solution and results: ThetaRay Hyper Dimensional Big Data analytics deployed in non-intrusive mode. ThetaRay s detection platform begins monitoring all data sources, unsupervised, producing automatic near-real time detection of ongoing threats within 2 hours. ThetaRay exposes the attacker probing the network via the ICMP protocol. Customer s security team receives pointed information about the attack, with rich forensic information for incisive action to stop the attack and prevent recurrence. GLOBAL DEFENSE CONTRACTOR Challenges: High-profile defense contractor is targeted by nation-state actors Stealthy attackers go undetected in the network, begin to exfiltrate data Attackers use unknown malware, then morph it to successfully avoid detection Existing solutions do not discover the attack ThetaRay provided with 300GB of raw data (2 weeks worth) for analysis Solution and results: ThetaRay Hyper Dimensional Big Data analytics deployed in non-intrusive way Within hours of deployment, the unknown, ongoing attack is automatically detected in the DNS protocol, linked with 201 other related anomalies ThetaRay provides customer with laser-focused details about the attack, exposing a previously unknown Chinese botnet infection. The security team took immediate action to clean the network and harden it to prevent recurrence. C O N F I D E N T I A L P a g e 6 7

7 THETARAY S KEY UNIQUE FEATURES Uncover Unknown Threats Seamlessly detect unknown attacks and their mutations before any damage takes place. Predictive analytics to identify operational events, reducing critical network downtime and performance issues. See unmatched detection rates with very low false positive levels. Hyper-dimensional Detection Uniquely fuses hyper-dimensional, multi-domain data to detect sophisticated stealthy attacks. Meta-data based detection, overcoming attackers encrypted traffic. Automated Big Data Analysis Continuous big data analysis to detect hidden anomalies. No big data know-how or expertise is required. Non-intrusive monitor mode, with no impact on customers networks. See the Big Picture Multiple attack-related events are uncovered automatically, providing insight into the scope and damage of the attack. Simultaneous protection across multiple environments, systems and protocols. Your organization cannot afford to be the next victim of lagging operational intelligence. To learn more about how you can start detecting unknown threats and protecting your critical infrastructure, contact ThetaRay today. ABOUT THETARAY ThetaRay is a leading provider of big data analytics platform and solutions for advanced cyber security and operational efficiencies, protecting the critical infrastructure and financial services markets against unknown threats. The company s patented, award-winning platform automatically uncovers unknown cyber and operational threats, allowing customers to take action and avert disaster before any damage occurs. ThetaRay s core technology is based on state of the art algorithms, which power its proprietary Hyper-Dimensional, Multi-Domain Big Data Analytics platform. Organizations whose operations rely on highly heterogeneous and complex environments leverage ThetaRay s unmatched detection and low false positive rates as a see-all power that enables them to unify detection and defeat the unknown. Learn more at Follow C O N F I D E N T I A L P a g e 7 7