United Energy Company controls network security with PT Network Attack Discovery

2022: Network Security Monitoring with PT Network Attack Discovery

The management of the United Energy Company (UEC) decided to introduce a product for deep traffic analysis. To do this, the PT Network Attack Discovery system was selected. This was reported on January 20, 2022 in Positive Technologies.

The PT Network Attack Discovery (PT NAD) deep network traffic analysis system allows you to quickly identify and investigate even complex targeted attacks on the enterprise.

Source: uneco.ru

According to a Positive Technologies study, in the III quarter of 2021, the realized 75% attacks were targeted. The attacks did not bypass the fuel power organizations. 33% of representatives surveyed have already encountered complex cyber threats. ENERGY INDUSTRY This study confirms the importance of the decision made in the ECC to implement a system of deep analysis of network traffic.

The criteria for selecting a product was the speed of implementation, namely quick installation and configuration. Following the pilot testing, the OEC chose Positive Technologies - PT NAD. The company won the competition for the implementation of the project. Softline Softline specialists allocated a segment for monitoring, configured traffic mirroring from switchboards to PT NAD and conducted product training for the information security energy company team.

Thanks to PT NAD, OEC specialists monitor what is happening in the company's network and what nodes are in it, get information that helps quickly eliminate violations that are potentially interesting to attackers. For example, using PT NAD, specialists IB , in addition to attacking techniques, will also be able to see the use of vocabulary by employees, passwords network configuration errors, transmission data using outdated and unprotected protocols. This allows you to quickly respond to the threat.

"PT Network Attack Discovery is a useful tool for monitoring network security. After implementing the product, we almost instantly saw the first results that helped us reduce security risks and improve infrastructure security. Softline specialists implemented the project qualitatively and as soon as possible, " commented Anton Melnik, Head of IB JSC United Energy Company

During the week-long penetration test, the IB team used PT NAD as a means of monitoring the actions of attackers at all stages of the attack: from intelligence to data collection and attempts to intercept control and control the network.

"It is worth emphasizing the responsible approach of the OEC, which did not wait until it faced a threat, but warned of possible attacks on its own network. The number of cybercrime is growing from year to year, so it is more important than ever for companies to take care of information security. Softline provided full comprehensive support to the OEC in the area of ​ ​ IB support due to the fact that the company has competencies in the supply of equipment and cybersecurity (a subsidiary of Infosecurity). The customer's tasks in this project were solved through Softline, as through the "single window" of introducing new solutions, " noted Victoria Novokshanova, Softline Manager for the development of IS in industrial organizations

The OEC plans to integrate PT NAD with the sandbox - a solution for analyzing files from traffic for the presence of malware in them.