作为cyber threats become more complex, industrial control systems (ICS) are even more vulnerable to attack. To that end, plant floor security can’t be handled the same way as it is in the enterprise where all the IT department may need is a firewall, virus detection software and network monitoring applications. The systems on the manufacturing floor need all of that—and more—because protecting ICSs requires multiple layers of security to keep the environment in a safe state.
考虑到这一点，两家网络安全技术供应商正在合作为工业企业提供联合产品，该产品将威胁检测软件与硬件增强网络保护团结起来。
本星期，Waterfall Security Solutions, a maker of a unidirectional security gateway, andFireEye威胁分析平台（TAP）的提供商建立了全球合作伙伴关系，以提供多运营的方法来确保工业网络。
This joint offering enables customers to monitor their ICS networks using FireEye’s cloud-based Helix service, a detection and response platform that simplifies, integrates and automates security operations. They can then safeguard the network using Waterfall’s Unidirectional CloudConnect for reliable and secure IT/OT integration.
Here’s how it works:
FireEye的利用总量从m日志和事件数据ultiple sources and applies intelligence against that data to drive actionable alerts. Event data is compressed, encrypted and sent to the cloud for centralized log retention, real-time threat analysis and incident investigation. TAP can prioritize actions based on risk and can identify the highest priority focus areas for an incident responder to help organizations accelerate their detection and response cycles.
CloudConnect also gathers data, specifically from industrial sources such as historians, OPC servers, devices and the ICS. It then converts that data into a unified cloud-friendly format, such as XML files, relational databases, publish/subscribe protocols or SOAP web services. CloudConnect is based onWaterfall’s Unidirectional Gateway technologythat allows information to be sent out of the ICS network for data sharing with the enterprise, but it is physically incapable of receiving data back into the ICS network.
共同努力，点击和CloudConnect将工业网络与威胁检测应用程序集成在一起，而没有允许不良行为者进入环境的风险。
Ironically, there is a cloud-based aspect to the cybersecurity offering. Industrial businesses that previously refrained from using any cloud or Industrial Internet of Things (IIoT) services due to security concerns, can be confident that their ICS networks are safe from external cyber risks.
“This new partnership is an important step towards improved security for industrial sites,” said Lior Frenkel, CEO and co-founder of Waterfall Security Solutions. “An increasingly complex industrial threat landscape demands increasingly sophisticated security solutions.”
