Kaspersky’s Enhanced Cybersecurity Solutions for Operational Technologies in Mumbai

In an era where cyber threats are becoming increasingly sophisticated, the need for robust cybersecurity measures is paramount, especially for operational technologies (OTs) and critical infrastructure. Recognizing this urgent requirement, Kaspersky has unveiled a suite of enhanced cybersecurity solutions specifically designed to cater to the unique needs of industrial companies. This initiative, launched in Mumbai, aims to fortify the defenses of organizations against the rising tide of cyber threats.

Addressing the Cybersecurity Landscape

The industrial sector has witnessed a significant uptick in cyberattacks targeting its operational technologies. These attacks can disrupt essential services, compromise sensitive data, and lead to substantial financial losses. Kaspersky’s new solutions are tailored to mitigate these risks by providing comprehensive security measures that address the specific vulnerabilities associated with OT environments.

Enhanced Configuration and Change Management

One of the standout features of Kaspersky’s new platform is the enhanced configuration and change management for OT infrastructure. This feature allows for meticulous inspection of security settings and continuous monitoring of changes across various systems. By utilizing both agent-based and agentless polling methods, Kaspersky can effectively gather configurations from Windows and Linux hosts, network devices, and Programmable Logic Controllers (PLCs). This proactive approach ensures that any unauthorized changes are promptly detected and addressed, thereby bolstering the overall security posture of industrial organizations.

Improved Asset Context for Incident Investigations

Understanding the context of assets during incident investigations is crucial for effective threat response. Kaspersky’s platform introduces new asset types that facilitate better context during such investigations. This includes the aggregation of critical information such as installed software, patches, local users, and discovered executables. The system automatically transmits this information to Kaspersky Industrial Cybersecurity (KICS) for Networks, ensuring that organizations receive periodic updates. This feature not only streamlines change management but also triggers alerts when deviations from established norms are detected, enabling swift action to mitigate potential threats.

Real-Time Network Topology Visualization

Kaspersky’s solutions also include scheduled active polling and automated network topology visualization. This functionality allows organizations to map real-time information about asset connections, providing a clear view of the security state of devices, even those without installed agents, such as computers and switches. By visualizing network topology, industrial companies can better manage security state changes and identify vulnerabilities that may arise from unmonitored devices.

Enhanced Detection Capabilities for Digital Substations

Digital substations are critical components of modern industrial infrastructure, and Kaspersky’s enhanced capabilities in this area are noteworthy. The platform now supports the import of Substation Configuration Description (SCD) files, enabling organizations to analyze configurations and extract asset attributes. Additionally, the review of IEC settings is facilitated, allowing for a more comprehensive understanding of the security landscape within digital substations. This feature is essential for ensuring that these vital infrastructures remain secure against potential cyber threats.

SD-WAN Sensor for Monitoring OT Network Traffic

As industrial infrastructures become more geographically distributed, the need for effective monitoring solutions grows. Kaspersky addresses this need with its new SD-WAN sensor, designed to monitor OT network traffic. This innovative architecture supports up to 100 monitoring points on a single KICS for Networks node, providing organizations with the ability to maintain oversight of their distributed environments. This capability is crucial for detecting anomalies and ensuring that network traffic remains secure.

Updated Portable Scanner for Comprehensive Host Inspection

Kaspersky’s updated Portable Scanner expands host inspection capabilities significantly. With new scanning technologies, organizations can conduct host inventory assessments, vulnerability scans, compliance checks, and security settings inspections. Additionally, the scanner includes traffic capturing functionalities, allowing for a thorough analysis of network activity. This comprehensive approach to host inspection ensures that potential vulnerabilities are identified and addressed before they can be exploited by malicious actors.

Managed Detection and Response (MDR) Services

In response to the growing skills gap in the cybersecurity workforce, Kaspersky has introduced Managed Detection and Response (MDR) services. These services are designed to support industrial companies facing staff shortages or skill deficiencies in cybersecurity. Kaspersky will provide outsourcing services for critical functions such as threat monitoring, detection, threat hunting, and incident analysis. This support enables organizations to maintain a strong security posture without the need for extensive in-house expertise.

Conclusion

Kaspersky’s enhanced cybersecurity solutions for operational technologies represent a significant advancement in the fight against cyber threats targeting industrial sectors. By addressing the unique challenges faced by these organizations, Kaspersky is not only helping to secure critical infrastructure but also empowering companies to navigate the complex cybersecurity landscape with confidence. As the threat landscape continues to evolve, such proactive measures are essential for safeguarding the future of industrial operations.