NEC Technology Automatically Identifies Cyberattack Risks for ICT Systems and Important Infrastructure
TOKYO, Nov 06, 2018 - (JCN Newswire) - NEC Corporation (TSE: 6701) today announced the development of a technology for automatically identifying the risk of cyberattacks. The new technology uses simulations in order to create a comprehensive evaluation of cyberattack risks for ICT systems and important infrastructure, such as electricity, gas, water, and transport facilities.
This technology collects information about components and complex network settings that are particular to control systems, as well as information on data flow, including information about isolated environments, from actual systems and reproduces a virtual model based on that information. The virtual model is used to run cyberattack simulations that enable the automatic identification of a variety of cyberattack risks.
Cyberattack simulations are created using analysis knowledge based on attacks utilizing e-mail and the Web, data falsification, spoofing, and attacks on isolated networks utilizing a USB and other techniques, in addition to knowledge(1) about software vulnerability and attack techniques that are extremely sophisticated and hard to understand. This makes it possible to create an exhaustive range of realistic attack simulations.
"This technology can identify potential attack paths and the scope of their influence, making it possible to implement the necessary security measures with a minimum of system outages," said Mikiya Tani, General Manager, Security Research Laboratories, NEC Corporation. "Moreover, the technology bolsters the security of social infrastructure and ICT systems for enterprises, while contributing to the safety of communities and the development of economic activity."
NEC aims to provide this technology commercially within the 2019 fiscal year.
Primary features of the new technology include the following:
1. Creation of a virtual model for accurate security risk analysis NEC developed a technique to create a virtual model by collecting detailed system information necessary for risk analysis, such as the hardware information of components (programmable logic controller [PLC] and others) peculiar to control systems, communications settings, such as packets and protocols, and data flow.
This makes it possible to visualize the entire configuration of complicated systems and data flow, which has conventionally been difficult to understand, even for specialists with extensive experience and advanced skills in status analysis. With this technique, NEC achieves an immediate, accurate understanding of the areas of vulnerability in risk analysis.
2. Analysis of realistic attack scenarios utilizing an attack database NEC created a database of analysis knowledge that is used to produce simulations with a computer. The database consists of information on software vulnerabilities and attack technique data(1), such as CVE and CAPEC, which are widely disclosed around the world, but can only be understood by specialists. By structuring and creating a database of common characteristics, such as the conditions under which attacks become feasible, the status of attackers, and the change in the status of systems that occurs when attacks succeed, a series of attack simulations, from the starting point to the goal of attacks, can be automatically and accurately created at high speed.
Further, because the database of analysis knowledge encompasses a variety of attack forms, such as attacks utilizing e-mail and the Web, data falsification, spoofing, as well as attacks on an isolated network utilizing a USB or other techniques, it is possible to create more realistic attack scenarios.
With this technology, an attack can be understood visually and automatically. Further, because the effectiveness of security when measures are taken can be repeatedly confirmed, potential security risks can also be found.
NEC will showcase this technology at the "C&C user forum & iEXPO 2018" held by the NEC Group at the Tokyo International Forum on Thursday, November 8 and Friday, November 9.
For more information, please visit: https://www.nec.com/en/event/uf-iexpo/
(1) A worldwide database that discloses information about a variety of software vulnerability and attack techniques collected by US-based companies.
Contact:NEC
Seiichiro Toda
s-toda@cj.jp.nec.com
+81-3-3798-6511
Source: NEC Corporation Sectors: Cloud & Enterprise, CyberSecurity
Copyright ©2024 JCN Newswire. All rights reserved. A division of Japan Corporate News Network.
|
Latest Release
JCB enables JCB Contactless acceptance at Taichung MRT in Taiwan Apr 26, 2024 10:00 JST
| Mazda Production and Sales Results for March 2024 and for April 2023 through March 2024 Apr 25, 2024 18:21 JST
| MHI Begins Operation of SOEC Test Module the Next-Generation High-Efficiency Hydrogen Production Technology at Takasago Hydrogen Park Apr 25, 2024 17:45 JST
| GAC Honda to Begin Sales of All-new e:NP2, the Second Model of e:N Series Apr 25, 2024 16:50 JST
| Toyota Exhibiting at Beijing Motor Show 2024 Apr 25, 2024 16:25 JST
| Honda Reaches Basic Agreement with Asahi Kasei on Collaboration for Production of Battery Separators for Automotive Batteries in Canada Apr 25, 2024 11:10 JST
| UNIQLO Sponsors KAWS + Warhol Exhibition Tour, Starting in Pittsburgh Apr 25, 2024 09:00 JST
| Mitsubishi Power Begins Commercial Operation of Seventh M701JAC Gas Turbine in Thailand GTCC Project; Achieves 75,000 AOH To-Date Apr 24, 2024 17:19 JST
| MC and Denka Sign J/V Agreement in Fullerene Business Apr 24, 2024 17:02 JST
| Mitsubishi Motors Posts Record Sales in the Philippines in FY2023 Apr 24, 2024 13:56 JST
| NEC Develops High-speed Generative AI Large Language Models (LLM) with World-class Performance Apr 24, 2024 13:25 JST
| Fujitsu SX Survey reveals key success factors for sustainability Apr 23, 2024 10:25 JST
| Fujitsu and METRON collaborate to drive ESG success: slashing energy costs, boosting productivity with new manufacturing industry solutions Apr 22, 2024 16:09 JST
| NEC Strengthens Commitment to Space Industry with Investment in Seraphim Space Venture Fund II Apr 22, 2024 15:09 JST
| Soft Space Launches the First and Only JCB Payment Gateway in Malaysia Apr 22, 2024 15:00 JST
| TOYOTA GAZOO Racing takes a one-two in Croatian thriller Apr 22, 2024 10:47 JST
| First-ever Mazda CX-80 Crossover SUV Unveiled in Europe Apr 19, 2024 13:50 JST
| Fujitsu develops technology to convert corporate digital identity credentials, enabling participation of non-European companies in European data spaces Apr 19, 2024 10:17 JST
| Mitsubishi Heavy Industries and NGK to Jointly Develop Hydrogen Purification System from Ammonia Cracking Gas Apr 18, 2024 17:01 JST
| Toyota Launches All-New Land Cruiser "250" Series in Japan Apr 18, 2024 13:39 JST
|
More Latest Release >>
|