Securing industrial operations is a unique challenge. The same approach used to secure information technology (IT) networks can’t effectively secure plant floors. That’s because operational technology (OT) has evolved tremendously over the years, creating very complex environments consisting of a dizzying variety of devices from different makes, models and generations communicating through different protocols.

As the processes and technology used in industrial settings rapidly evolve, the improved precision and efficiency of devices will need to be monitored in equally advanced ways. This need can be met with an emerging method of monitoring known as secure remote access.

In June 2017, researchers disclosed a new family of sophisticated malware that is designed to target and disrupt industrial control systems (ICS) in power grids, specifically electric utility substations. CRASHOVERRIDE (aka Win32/Industroyer) offers modules that use standard industrial protocol communications and can directly control switches and circuit breakers within Remote Terminal Units (RTUs) in substations.

Petya ransomware surfaced publicly in June 2017, starting first in the Ukraine, rapidly moving to Europe and now into the United States. This global ransomware epidemic will not only encrypt your systems – essentially denying you access to everything it holds – it also “wipes” (overwrites) the hard drive master boot record (MBR) so that it cannot boot up its operating system. Without a backup, your system is dead and all the data lost. Some researchers believe even if the Bitcoin ransom were paid and keys obtained, they would not work to decrypt and restore your systems.

What do the movies “Groundhog Day” and “Independence Day” have in common, and what can we learn from them related to cyber defense? Well, if you weren’t able to attend the annual RSA Conference back in February, cyber defense expert Tony Sager explained it all at the Tripwire booth. (In case you missed it, Belden acquired Tripwire in January of 2015.)