Oreol Security ProfiDiode

2020: Compatibility with PT Industrial Security Incident Manager (PT ISIM)

On August 6, 2020 fat is known that the analysis system of traffic of APCS networks of PT Industrial Security Incident Manager (PT ISIM) and the device of the unidirectional data transmission ProfiDIODE of Oreol Security company passed tests for compatibility. Testing included check of correct work of the solution, its stability at sharp change of loading, integrity of data in the received copy of traffic.

Oreol Security ProfiDiode

As it was explained, the joint solution Positive Technologies and Oreol Security allows to provide protection of the technology systems, providing isolation of a segment of an APCS. PT ISIM helps to detect cyber attacks or wrongful acts of personnel, vulnerability of the APCS components and to make investigations of incidents, and integration with ProfiDIODE excludes a possibility of a negative impact on a segment of an APCS due to the unidirectional data transmission.

The solution was checked for data transfer rates up to 100 Mbps that corresponds to standard value of this indicator in real an APCS. Results of tests were recognized satisfactory. The equipment of Oreol Security can be recommended for sharing with PT ISIM in technology networks of industrial enterprises. Separately specialists of Positive Technologies noted the compact ProfiDIODE sizes and an opportunity to use additional constructs for compact placement at the same time of several devices in standard telecommunication racks.

Application of a complex from two products allows to perform monitoring of traffic completely separately, without influence on technology process. It is especially relevant for industrial enterprises as even short-term interruption of technology process for the sake of collecting and data analysis for them is impossible. Vasily Nosakov, the CEO of Oreol Security commented

Need of monitoring of events of information security for industrial networks already little at whom raises doubts. According to us, 73% of the industrial companies are insufficiently protected from external cyber attacks. At identification of cyberincidents in an APCS it is important to consider requirements of continuity of technology processes. In a basis of PT ISIM the architecture of passive monitoring which excludes intervention in technology process is put. PT ISIM also offers integration with other cybersecurity systems which are used on production (for example, with SIEM systems) and also with the solutions providing the unidirectional transport of data. Dmitry Darensky, the head of practice of industrial cyber security of Positive Technologies noted

For August, 2020 PT Industrial Security Threats Indicators which is built in in PT ISIM base of industrial cyberthreats contains more than 4000 relevant rules for identification of different risks in technology networks, including miners of cryptocurrencies and vulnerabilities which are operated by viruses encoders and the specialized malware (Trisis, Triton). The product allows to detect change of an operation mode of programmable logic controllers, lack of reaction of an APCS to the supercritical modes, modification of the PLC projects and other critically significant events in technology network.

ProfiDIODE provides the unidirectional data transmission at a speed up to 1000 Mbps and is applied to protection against threats of cybersecurity in crucial information infrastructures at the enterprises of transport, the industry, fuel and energy complex, in executive authorities.