NEC Technology Automatically Identifies Cyberattack Risks for ICT Systems and Important Infrastructure
TOKYO, Nov, 06 2018 - (JCN Newswire) - NEC Corporation (TSE: 6701) today announced the development of a technology for automatically identifying the risk of cyberattacks. The new technology uses simulations in order to create a comprehensive evaluation of cyberattack risks for ICT systems and important infrastructure, such as electricity, gas, water, and transport facilities.
This technology collects information about components and complex network settings that are particular to control systems, as well as information on data flow, including information about isolated environments, from actual systems and reproduces a virtual model based on that information. The virtual model is used to run cyberattack simulations that enable the automatic identification of a variety of cyberattack risks.
Cyberattack simulations are created using analysis knowledge based on attacks utilizing e-mail and the Web, data falsification, spoofing, and attacks on isolated networks utilizing a USB and other techniques, in addition to knowledge(1) about software vulnerability and attack techniques that are extremely sophisticated and hard to understand. This makes it possible to create an exhaustive range of realistic attack simulations.
"This technology can identify potential attack paths and the scope of their influence, making it possible to implement the necessary security measures with a minimum of system outages," said Mikiya Tani, General Manager, Security Research Laboratories, NEC Corporation. "Moreover, the technology bolsters the security of social infrastructure and ICT systems for enterprises, while contributing to the safety of communities and the development of economic activity."
NEC aims to provide this technology commercially within the 2019 fiscal year.
Primary features of the new technology include the following:
1. Creation of a virtual model for accurate security risk analysis
NEC developed a technique to create a virtual model by collecting detailed system information necessary for risk analysis, such as the hardware information of components (programmable logic controller [PLC] and others) peculiar to control systems, communications settings, such as packets and protocols, and data flow.
This makes it possible to visualize the entire configuration of complicated systems and data flow, which has conventionally been difficult to understand, even for specialists with extensive experience and advanced skills in status analysis. With this technique, NEC achieves an immediate, accurate understanding of the areas of vulnerability in risk analysis.
2. Analysis of realistic attack scenarios utilizing an attack database
NEC created a database of analysis knowledge that is used to produce simulations with a computer. The database consists of information on software vulnerabilities and attack technique data(1), such as CVE and CAPEC, which are widely disclosed around the world, but can only be understood by specialists. By structuring and creating a database of common characteristics, such as the conditions under which attacks become feasible, the status of attackers, and the change in the status of systems that occurs when attacks succeed, a series of attack simulations, from the starting point to the goal of attacks, can be automatically and accurately created at high speed.
Further, because the database of analysis knowledge encompasses a variety of attack forms, such as attacks utilizing e-mail and the Web, data falsification, spoofing, as well as attacks on an isolated network utilizing a USB or other techniques, it is possible to create more realistic attack scenarios.
With this technology, an attack can be understood visually and automatically. Further, because the effectiveness of security when measures are taken can be repeatedly confirmed, potential security risks can also be found.
NEC will showcase this technology at the "C&C user forum & iEXPO 2018" held by the NEC Group at the Tokyo International Forum on Thursday, November 8 and Friday, November 9.
For more information, please visit: https://www.nec.com/en/event/uf-iexpo/
(1) A worldwide database that discloses information about a variety of software vulnerability and attack techniques collected by US-based companies.
About NEC Corporation
NEC Corporation is a leader in the integration of IT and network technologies that benefit businesses and people around the world. The NEC Group globally provides "Solutions for Society" that promote the safety, security efficiency and fairness of society. Under the company's corporate message of "Orchestrating a brighter world," NEC aims to help solve a wide range of challenging issues and to create new social value for the changing world of tomorrow. For more information, visit NEC at https://www.nec.com.
Source: NEC Corporation
Sectors: Enterprise IT, Security/Biometrics
Copyright ©2019 JCN Newswire. All rights reserved. A division of Japan Corporate News Network.
More Latest Release >>
DENSO and Aisan Start Studying the Possibility of Strengthening Competitiveness in Powertrain and Future Growth Areas
May 20, 2019 18:40 JST
Honda Begins Joint Research with Center for Information and Neural Networks (CiNet) to Strengthen its Study of Humans in the Areas of Mobility and Robotics
May 20, 2019 18:30 JST
Lexus LC Takes 24th Position Overall at QF Race for Nurburgring 24 Hours Endurance Race
May 20, 2019 17:07 JST
"Science Based Targets (SBT) Initiative" Approves Eisai's Greenhouse Gas Reduction Targets
May 17, 2019 16:34 JST
Toyota Rolls Out New Supra
May 17, 2019 15:49 JST
DOCOMO Develops Safe, Blade-free Drone Propelled with Ultrasonic Vibrations
May 17, 2019 12:08 JST
Hitachi Automotive Systems' EV Inverter Adopted for the e-tron, Audi's First Mass Production Electric Vehicle
May 17, 2019 11:40 JST
NEC Awarded Intelligent Transportation System Project in Oman
May 17, 2019 11:15 JST
Eisai to Present Data on Oncology Pipeline and Products at 55th Asco Annual Meeting
May 16, 2019 08:37 JST
Toyota: The Master Craftsmanship of the Century, Japan's Only Chauffeur-Driven Car
May 15, 2019 16:19 JST
NEC and CSC e-Governance Services Form a Strategic Alliance to Deliver Innovative Digital Services for Rural Areas in India
May 15, 2019 13:12 JST
Mitsubishi Shipbuilding Holds Christening Ceremony for Next-Generation LNG Carrier "BUSHU MARU"
May 15, 2019 12:14 JST
MHPS Receives Order for Two H-25 Gas Turbines for Major Chinese Paper Firm Lee & Man Paper Manufacturing Ltd.
May 15, 2019 11:37 JST
Mitsubishi Corporation: Production Underway at Cameron LNG
May 14, 2019 20:01 JST
Fujitsu Formulates "Design the Trusted Future by Data x AI", a Process and Framework for Creating Goal-Oriented Businesses
May 14, 2019 13:23 JST
NEC Becomes the First Japanese Company to Join the TESLA Consortium's Fight Against Cancer
May 14, 2019 10:12 JST
Fujitsu and Autonomic Collaborate to Bring Advanced Mobility Services to Global Automakers
May 14, 2019 09:44 JST
NEC: Grupo Gtd Goes Live With Netcracker's Full-Stack BSS/OSS Suite for B2B Transformation
May 13, 2019 20:39 JST
Tanak and the Toyota Yaris WRC Conquer a New Rally in Chile
May 13, 2019 12:36 JST
Eisai Enters Into Licensing Agreement With Medac Concerning Anti-Rheumatic Agent Methotrexate Subcutaneous Injection in Japan
May 10, 2019 13:34 JST