Welcome!

News Feed Item

MHI and NTT Complete Prototype of "InteRSePT" Cyber Security Technology that Delivers Safe and Secure Operation of Control Systems



- Enables Security Measures for Each Operating State -

MHI's Cyber Lab (image rendering)


TOKYO, Nov 30, 2016 - (JCN Newswire) - Mitsubishi Heavy Industries, Ltd. (MHI) and Nippon Telegraph and Telephone Corporation (NTT) have completed the joint development of a prototype of "InteRSePT"(1), a cyber security technology for critical infrastructure control systems. InteRSePT offers safe and secure system operations using real-time anomaly detection and response for unknown attacks. MHI and NTT aim to apply the newly developed technology in commercial fields such as thermal power generation facilities and chemical plants where continuous availability(2) is of high importance.

MHI's Cyber Lab (image rendering)
http://www.acnnewswire.com/topimg/Low_MHINTT11301..jpg

1. Background

Until now, security countermeasures such as IDS / IPS(3) and firewalls(4) have been developed to prevent cyber-attacks caused by malware(5) and DDoS(6). However, in recent years, advanced malware can monitor the operating characteristics and control commands of the target device and change the timing of transmission or parts of commands, causing the target device to fail. MHI and NTT have been working on cyber security research and development since March this year to respond to such threats. The InteRSePT prototype is a result of this work, combining the high-reliability and safe control technology developed by MHI for the fields of defense and space, and security orchestration technology(7) developed by NTT.

2. Outline of InteRSePT

InteRSePT consists of a network monitoring appliance (NMA) and an advanced security management appliance (ASMA), and monitors real-time data flows in networks in an integrated manner. The system delivers real-time security measures that place importance on availability by changing the security remediation rules on each operating state of the target device. This enables protection against cyber-attacks that exploit control commands, which are difficult to detect and respond to with conventional technology.

Specifically, the system (1) collects and analyzes packets of sensor information flows in the control system network to gain an overall understanding of the operating state; (2) changes the communication control rules of the NMA according to the actual operating state and other factors; (3) analyzes and blocks the packet based on those rules; and (4) aggregates multiple sensor information with the ASMA and monitors the behavior of the entire control system in an integrated manner for early detection. Consequently, it can respond quickly even to unknown cyber-attacks and minimize the damage of such attacks.

3. Future plans

Going forward, at MHI's Cyber Lab, a security development and verification hub located in Tokyo, MHI and NTT will evaluate the technology prototype and verify its adaptability to control systems, to further advance InteRSePT and expand its application to O&M (operation and maintenance) business.

http://www.acnnewswire.com/topimg/Low_MHINTT11302.jpg

(1) InteRSePT: Abbreviation of Integrated Resilient Security and Proactive Technology - a registered trademark of MHI, in Japan
(2) Availability: Continuous operation of a system without stoppage
(3) IDS / IPS: Intrusion Detection System / Intrusion Protection System-systems to detect and protect against cyber intrusions
(4) Firewall: System for discrimination and reporting of unauthorized access
(5) Malware: Abbreviation of malicious software
(6) DDoS: Distributed Denial of Service attack
(7) Security orchestration technology: Technologies that collect and analyze cyber-attack related information including target device / system status and anomaly events, and comprehensively control diversified security appliances

About Mitsubishi Heavy Industries, Ltd.

Mitsubishi Heavy Industries, Ltd. (MHI), headquartered in Tokyo, is one of the world's leading industrial firms with 80,000 group employees and annual consolidated revenues of around 38 billion U.S. dollars. For more than 130 years, the company has channeled big thinking into innovative and integrated solutions that move the world forward. MHI owns a unique business portfolio covering land, sea, sky and even space. MHI delivers innovative and integrated solutions across a wide range of industries from commercial aviation and transportation to power plants and gas turbines, and from machinery and infrastructure to integrated defense and space systems.
For more information, please the MHI Group website: http://www.mhi-global.com.
For Technology, Trends and Tangents, visit MHI's new online media SPECTRA: http://spectra.mhi.com.

Source: Mitsubishi Heavy Industries, Ltd.

Contact:
Mitsubishi Heavy Industries, Ltd.
Joseph Hood, PR Manager
Email: [email protected]
Tel: +81-(0)3-6716-2168
Fax: +81-(0)3-6716-5860




Copyright 2016 JCN Newswire . All rights reserved.

More Stories By ACN Newswire

Copyright 2008 ACN Newswire. All rights reserved. Republication or redistribution of ACN Newswire content is expressly prohibited without the prior written consent of ACN Newswire. ACN Newswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
Multiple data types are pouring into IoT deployments. Data is coming in small packages as well as enormous files and data streams of many sizes. Widespread use of mobile devices adds to the total. In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists looked at the tools and environments that are being put to use in IoT deployments, as well as the team skills a modern enterprise IT shop needs to keep things running, get a handle on all this data, and deliver...
In his session at @ThingsExpo, Eric Lachapelle, CEO of the Professional Evaluation and Certification Board (PECB), provided an overview of various initiatives to certify the security of connected devices and future trends in ensuring public trust of IoT. Eric Lachapelle is the Chief Executive Officer of the Professional Evaluation and Certification Board (PECB), an international certification body. His role is to help companies and individuals to achieve professional, accredited and worldwide re...
You know you need the cloud, but you’re hesitant to simply dump everything at Amazon since you know that not all workloads are suitable for cloud. You know that you want the kind of ease of use and scalability that you get with public cloud, but your applications are architected in a way that makes the public cloud a non-starter. You’re looking at private cloud solutions based on hyperconverged infrastructure, but you’re concerned with the limits inherent in those technologies.
Both SaaS vendors and SaaS buyers are going “all-in” to hyperscale IaaS platforms such as AWS, which is disrupting the SaaS value proposition. Why should the enterprise SaaS consumer pay for the SaaS service if their data is resident in adjacent AWS S3 buckets? If both SaaS sellers and buyers are using the same cloud tools, automation and pay-per-transaction model offered by IaaS platforms, then why not host the “shrink-wrapped” software in the customers’ cloud? Further, serverless computing, cl...
The taxi industry never saw Uber coming. Startups are a threat to incumbents like never before, and a major enabler for startups is that they are instantly “cloud ready.” If innovation moves at the pace of IT, then your company is in trouble. Why? Because your data center will not keep up with frenetic pace AWS, Microsoft and Google are rolling out new capabilities. In his session at 20th Cloud Expo, Don Browning, VP of Cloud Architecture at Turner, posited that disruption is inevitable for comp...
Wooed by the promise of faster innovation, lower TCO, and greater agility, businesses of every shape and size have embraced the cloud at every layer of the IT stack – from apps to file sharing to infrastructure. The typical organization currently uses more than a dozen sanctioned cloud apps and will shift more than half of all workloads to the cloud by 2018. Such cloud investments have delivered measurable benefits. But they’ve also resulted in some unintended side-effects: complexity and risk. ...
With the introduction of IoT and Smart Living in every aspect of our lives, one question has become relevant: What are the security implications? To answer this, first we have to look and explore the security models of the technologies that IoT is founded upon. In his session at @ThingsExpo, Nevi Kaja, a Research Engineer at Ford Motor Company, discussed some of the security challenges of the IoT infrastructure and related how these aspects impact Smart Living. The material was delivered interac...
It is ironic, but perhaps not unexpected, that many organizations who want the benefits of using an Agile approach to deliver software use a waterfall approach to adopting Agile practices: they form plans, they set milestones, and they measure progress by how many teams they have engaged. Old habits die hard, but like most waterfall software projects, most waterfall-style Agile adoption efforts fail to produce the results desired. The problem is that to get the results they want, they have to ch...
IoT solutions exploit operational data generated by Internet-connected smart “things” for the purpose of gaining operational insight and producing “better outcomes” (for example, create new business models, eliminate unscheduled maintenance, etc.). The explosive proliferation of IoT solutions will result in an exponential growth in the volume of IoT data, precipitating significant Information Governance issues: who owns the IoT data, what are the rights/duties of IoT solutions adopters towards t...
"We are a monitoring company. We work with Salesforce, BBC, and quite a few other big logos. We basically provide monitoring for them, structure for their cloud services and we fit into the DevOps world" explained David Gildeh, Co-founder and CEO of Outlyer, in this SYS-CON.tv interview at DevOps Summit at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
In 2014, Amazon announced a new form of compute called Lambda. We didn't know it at the time, but this represented a fundamental shift in what we expect from cloud computing. Now, all of the major cloud computing vendors want to take part in this disruptive technology. In his session at 20th Cloud Expo, Doug Vanderweide, an instructor at Linux Academy, discussed why major players like AWS, Microsoft Azure, IBM Bluemix, and Google Cloud Platform are all trying to sidestep VMs and containers wit...
While DevOps most critically and famously fosters collaboration, communication, and integration through cultural change, culture is more of an output than an input. In order to actively drive cultural evolution, organizations must make substantial organizational and process changes, and adopt new technologies, to encourage a DevOps culture. Moderated by Andi Mann, panelists discussed how to balance these three pillars of DevOps, where to focus attention (and resources), where organizations might...
"When we talk about cloud without compromise what we're talking about is that when people think about 'I need the flexibility of the cloud' - it's the ability to create applications and run them in a cloud environment that's far more flexible,” explained Matthew Finnie, CTO of Interoute, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
The Internet giants are fully embracing AI. All the services they offer to their customers are aimed at drawing a map of the world with the data they get. The AIs from these companies are used to build disruptive approaches that cannot be used by established enterprises, which are threatened by these disruptions. However, most leaders underestimate the effect this will have on their businesses. In his session at 21st Cloud Expo, Rene Buest, Director Market Research & Technology Evangelism at Ara...
No hype cycles or predictions of zillions of things here. IoT is big. You get it. You know your business and have great ideas for a business transformation strategy. What comes next? Time to make it happen. In his session at @ThingsExpo, Jay Mason, Associate Partner at M&S Consulting, presented a step-by-step plan to develop your technology implementation strategy. He discussed the evaluation of communication standards and IoT messaging protocols, data analytics considerations, edge-to-cloud tec...