These SCADA signatures now enable WatchGuard XTM and legacy e-Series security appliances to provide advanced threat protection for industrial control systems that monitor and control industrial, infrastructure or facility-based networks.
Major market trends are driving the need to extend enterprise network security and protection to operational technologies. Many operational technology (OT) networks are converging with information technology (IT) networks. For example, as infrastructure power grids become "smart," they also stand exposed to similar vulnerabilities that target IP-based business networks.
"Historically, OT networks ran autonomously or were completely disconnected from IT protection and control," said Tim Helming, Director of Product Management at WatchGuard. "However, as OT and IT networks converge, legacy OT networks become vulnerable to hackers and viruses. Now, WatchGuard is providing the same levels of advanced intrusion prevention, malware protection and granular management used in enterprise environments to secure key industrial and infrastructure networks."
Infrastructure Attacks - A New Era in Targeted Malware Publicity around the extremely sophisticated Stuxnet worm over the last year has raised awareness of the need to protect critical infrastructure.
Infrastructure malware is nothing new, and by itself, Stuxnet does little harm to typical PCs and business networks. It is a worm that targets industrial software and equipment that falsifies industrial process control sensor signals.
What makes Stuxnet stand out is the level and sophistication of which it targets its victims. Stuxnet marks a new era of highly sophisticated, extremely targeted malware, and in this case, specific to a small group of industrial systems. It portends a new wave of attacks targeted to OT networks, ranging from citywide electrical power grids, traffic monitoring systems down to individual facility HVAC systems.
As OT and IT networks converge, WatchGuard predicts next-generation firewalls will become the predominate solution of choice for protecting legacy OT networks. WatchGuard Intrusion Prevention Service - Key to Stopping Hackers WatchGuard Intrusion Prevention Service (IPS) is a fully integrated security subscription for all WatchGuard XTM appliances. It works in tandem with the application layer content inspection of the XTM to provide real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows. IPS scans traffic on all major protocols, using continually updated signatures to detect and block all types of threats.
With it, administrators can monitor, manage and protect OT networks side-by-side with their existing IT networks. This helps reduce cost, eliminate redundancies and streamline OT and IT security management.
About WatchGuard Technologies, Inc. Since 1996, WatchGuardR Technologies, Inc. has been the advanced technology leader of business security solutions, providing mission-critical protection to hundreds of thousands of businesses worldwide. The WatchGuard family of wired and wireless unified threat management appliances, messaging, content security and SSL VPN remote access solutions provide extensible network, application and data protection, as well as unparalleled network visibility, management and control. WatchGuard products are backed by WatchGuard LiveSecurityR Service, an innovative support, maintenance, and education program. WatchGuard is headquartered in Seattle and has offices serving North America, Europe, Asia Pacific, and Latin America. To learn more, visit http://www.watchguard.com/.
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. |
How Did They Get In? A Guide to Tracking Down The Source of an APT
If you think that your organization hasn't been affected by an advanced persistent threat, you probably haven't looked hard enough. Identifying that your organization is under attack is difficult enough; determining the scope of infiltration and damage presents a whole new level of challenge. To effectively protect against APTs, security pros will need to employ an arsenal of tools in a coordinated fashion, as well as develop new understandings of and approaches to system and data exploits. Here's a short and simple guide to this challenge.
Detecting and Defending Against Advanced Persistent Threats
APTs are a growing problem for enterprises big and small. Protecting your organization from these targeted threats
requires constant vigilance, ongoing employee training and a concerted effort to align security systems to address
every phase of an APT. Companies also need to develop a remediation and response plan if, despite best efforts, defenses are breached.
Smarter, Stealthier, Sneakier Malware
Increasingly sophisticated and targeted attacks are making it more difficult for organizations to detect
and defend against the latest malware. In this compendium of recent coverage from Dark Reading, you?ll get a look at some of the newest -- and most dangerous -- malware on the Web, and what you can do to stop it.
Other reports from the Advanced Threats Tech Center:
| Sponsored by: |
MOBILE SECURITY - Mapping an Ecosystem of Risk
This white paper highlights the various considerations for defending mobile applications-from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
Software Security Delivered in the Cloud
This Solution Guide details the automated, turnkey service that requires no special security assessment expertise. It details HP's market-leading static and dynamic analysis technologies that help organizations worldwide gain insight into the security state of their essential business applications.
SANS Mobility/BYOD Security Survey
This survey, which includes input from more than 500 IT professionals, explores how organizations are managing risk around their end user mobile devices as well as what level of policies and controls enterprises have around mobile usage.
Expert Guide to Application Security - Real-time Hybrid Analysis
Explore the next generation of hybrid security analysis - what it is, how it works, and its benefits. This white paper details how hybrid application security enables organizations to resolve critical software security issues faster and at a lower cost than any other available technology.
A Mainstay Partners Study: Does Application Security Pay?
Measuring the Business Impact of Software Security Assurance Solutions: a study of 17 organizations that implemented solutions from Fortify Software, combining industry research and benchmark analysis to identify, qualify, and quantify the full range of benefits seen from their SSA investments.
MORE NEWSFEED >>>