How to protect your industrial facilities from USB-based malware

USB-borne malware can infect your industrial equipment unless you take the proper precautions, says Honeywell.

illustration of someone putting an infected usb into a laptop and infecting the laptop
Image: Login DG-Studio/Adobe Stock

Industrial organizations face security threats not only on their networks but across their factories and facilities. A successful cyberattack can compromise hardware and software used for critical operations. Though most attacks are launched via a network or individual computer, some are staged via storage devices. A report published Tuesday by Honeywell looks at how malware on USB devices can threaten industrial facilities.

For its 2022 Industrial Cybersecurity USB Threat Report, Honeywell noted that USB storage drives can be used to carry files into or out of industrial facilities. These drives are enlisted to infect systems with malware or to compromise sensitive information. Since the first such report was published four years ago, the threats faced by operational technology (OT) environments have become more ubiquitous and more dangerous.

SEE: Password breach: Why pop culture and passwords don’t mix (free PDF) (TechRepublic)

USB-based threats on the rise

To devise its report, Honeywell’s Cybersecurity Global Analysis, Research and Defense team analyzed USB-based threats detected and blocked by its security engine. The devices examined were actively used in industrial facilities. As the results were limited to malware that was blocked, there were likely additional threats not detected or recorded by the report.

Among all the security threats seen by Honeywell, 32% were specific to industrial facilities. Ones designed to propagate using USB devices or exploit USB drives to install malware rose to 52% this year from 37% the previous year.

Threats aimed at establishing remote access into the compromised system were level at 51%. Over the same time, high-impact security threats able to trigger a loss of control or loss of visibility into an industrial device increased to 81% from 79% of all the visible threats.

graph data of year over year cybersecurity threats
Image: Honeywell

This year’s results are an improvement over previous years when some of the threats doubled in activity. The more moderate increases seen this year are a sign that the level of threats against this sector may have reached a plateau; though, they continue to remain at extremely high levels.

“USB-borne malware is clearly being leveraged as part of larger cyberattack campaigns against industrial targets,” Honeywell said in the report. “Adaptations have occurred to take advantage of leveraging the ability of USB removable media to circumvent network defenses and bypass the air gaps upon which many of these facilities depend on for protection.

“Continued diligence is necessary to defend against the growing USB threat, and strong USB security controls are highly recommended.”

Honeywell’s advice for protecting against USB-based malware

For industrial organizations seeking to protect their facilities and operation technology from compromise via USB, Honeywell offers the following recommendations.

SEE: Mobile device security policy (TechRepublic Premium)

Establish a clear USB security policy

USB removable media can easily be used as an initial attack method into industrial control and operational technology environments. For that reason, establish and enforce policies to better secure USB media and peripherals.

Reduce the time it takes to remediate a threat

New types of threat variants are surfacing more quickly, specifically using USB devices to target individuals. To combat these threats, examine existing security controls and patch cycles to close the time required to eliminate a threat. Also, look at any external controls used to provide real-time detection of threats.

Secure your files, documents, and other digital content

Make sure to inspect the primary routes into and between industrial facilities, including removable media and network connections. The goal is to improve the ability to prevent the introduction and propagation of content-based malware.

Control outbound network connectivity from process control networks

This type of access must be tightly controlled and enforced by network switches, routers and firewalls. Security threats that cross the air gap via USB can sneak into industrial systems, setting up backdoors to install additional payloads and creating remote command-and-control processes.

Keep your security up to date

Be sure to regularly update antivirus and security software used in process control facilities. But beyond traditional anti-malware defenses, a more layered approach to threat detection with threat intelligence that covers operational technology is strongly recommended.

Patch and harden all end nodes

Security threats can set up persistence and covert remote access to otherwise air-gapped end nodes and other systems. As such, be sure to patch and protect the end nodes in your industrial facilities. By hardening your operational technology systems, you also reduce the time required to mitigate a threat.

Source link

istanbul escort aksaray escort arnavutköy escort ataköy escort avcılar escort avcılar türbanlı escort avrupa yakası escort bağcılar escort bahçelievler escort bahçeşehir escort bakırköy escort başakşehir escort bayrampaşa escort beşiktaş escort beykent escort beylikdüzü escort beylikdüzü türbanlı escort beyoğlu escort büyükçekmece escort cevizlibağ escort çapa escort çatalca escort esenler escort esenyurt escort esenyurt türbanlı escort etiler escort eyüp escort fatih escort fındıkzade escort florya escort gaziosmanpaşa escort güneşli escort güngören escort halkalı escort ikitelli escort istanbul escort kağıthane escort kayaşehir escort küçükçekmece escort mecidiyeköy escort merter escort nişantaşı escort sarıyer escort sefaköy escort silivri escort sultangazi escort suriyeli escort şirinevler escort şişli escort taksim escort topkapı escort yenibosna escort zeytinburnu escort porno 1080p porno izle 4k porno izle 720p porno izle abella danger alman alman porno alman porno izle aloha tube porno amatör amatör porno amatör porno izle anal anal porno anal porno izle arap porno asa akira porno asyalı porno bangbros porno bangbros porno izle banyoda sikis başörtülü porno beeg porno izle beyaz tenli porno izle biseksuel porno izle bisexsuel porno brandi love porno brazzers brazzers porno izle canli porno canli porno izle çinli porno çinli porno izle ensest porno ensest porno izle ensest seks erotik porno erotik porno izle esmer porno esmer porno izle etek altı fake agent fake taxi fake taxi porno fantazi pornoları fantezi porno izle fetiş porno fetiş porno izle fetish fransız porno fransız porno izle full hd hg porno izle gangbang porno genç kız porno izle genç kız sikişi genç teen porno izle gizli çekim porno gizli çekim pornosu grup pornosu grup porno grup porno izle hd pornolar hd porno hd porno izle hemşire porno hemşire pornosu hizmetçi porno hizmetçi porno izle ingiliz porno japon pornoları japon porno kızlık bozma kızlık bozma porno izle konulu porno konulu porno izle koreli porno köylü pornoları kumral porno kumral porno izle latin pornoları latin porno latin porno izle lezbiyen pornoları lezbiyen porno lezbiyen porno izle lisa ann porno liseli pornoları liseli porno liseli porno izle manken porno manken porno izle masaj porno izle masturbasyon porno izle masturbasyon pornoları mature porno mia khalifa porno mia malkova porno milf porno izle mobil porno mobil porno izle öğrenci porno izle öğretmen porno izle okul porno izle olgun kadın pornosu olgun porno oral porno oral porno izle oral seks porna izle pornhub pornhub porno izle porno film izle porno indir porno izle porno resimler porno star porntube porno izle redtube redtube pornoları riley reid porno rokettube rus pornoları rus porno rus porno izle sakso blowjob porno izle sarışın pornoları sarışın porno sarışın porno izle sarışın pornoları sekreter porno shemale sikiş sikiş sikiş izle şişman porno siyahi pornoları suriyeli pornoları swinger porno tecavüz porno teen porn türbanlı pornoları türbanlı porno türk pornoları türk porno türk porno izle türkçe altyazılı porno türkçe altyazılı porno izle xhamster pornoları xhamster porno xhamster porno izle xnxx xnxx porno xnxx porno izle xvideos xvideos porno izle yaşlı porno yeşilçam porno izle youjizz youporn youporn porno izle zenci porno güvenilir bahis siteleri bahis siteleri casino deneme bonusu casino siteleri deneme bonusu para yatırma bonusu bahis siteleri casino siteleribahis sitesi para yatırma