“The attack on contractors once again demonstrates that for electric power facilities to be operated reliably,it is critically important to ensure workstations and servers are protected–both on corporate and operational technology networks,”comments Anton Shipulin,solution business lead,Kaspersky Industrial CyberSecurity.“Although strong endpoint protection may be enough to prevent similar attacks,in this case,we still recommend using the most comprehensive approach to support the industrial facility’s cyber-defense.Attacks through contractors and suppliers can have completely different entry points within the enterprise,including ones on the OT network.Even though the attack’s objectives remained unclear,it is more accurate to follow the assumption that attackers have the potential to gain access to the facility’s critical systems.Modern means of network monitoring,anomaly and attack detection can help to detect signs of an attack on industrial control systems and equipment in a timely manner,and prevent a possible incident.”
卡巴斯基工业网络安全解决方案业务负责人Anton Shipulin表示:“对承包商的攻击再次表明，要让电力设施可靠运行，确保工作站和服务器受到保护至关重要，无论是在企业网络还是在运营技术网络上。虽然强大的端点保护可能足以防止类似的攻击，但在这种情况下，我们仍然建议使用最全面的方法来支持工业设施的网络防御。通过承包商和供应商进行的攻击在企业内部可能有完全不同的入口点，包括在OT网络上的入口点。尽管攻击的目标仍不清楚，但假设攻击者有潜力获得对该设施的关键系统的访问权限，则更为准确。现代的网络监视，异常和攻击检测手段可以帮助及时发现对工业控制系统和设备的攻击迹象，并防止可能的事件发生。”
Triconex FSDO 7400159-030 rev. B8
Force computer SYS68K/CPU-6A 100602
H# Agilent E5037B E5037-65003 data generator module
Thermo electron J10-220 P/N: 07051013379B
ASM 03-28164 Rev. H-P2
