OT Monitoring with Nozomi SCADAGuardian

Do you still remember Stuxnet? This malware was used to specifically attack the Iranian nuclear programme. For weeks, centrifuges were manipulated to produce an imbalance, which then damaged them irreparably and also made the product unusable.

Imagine if something similar could happen in your company. For example, if you produce medicines in your company, someone could manipulate the dose of a medicine. The whole thing might not be noticed until the manipulated goods are already in circulation. Customers may then be harmed because either the dose of an important medicine was too low and cannot work properly, or it was overdosed and can lead to severe side effects or damage to health. In addition, the affected batches would have to be recalled and destroyed.

Then you have multiple problems. Apart from the costs of production stoppage and recall. On the one hand, you suffer a loss of image because your company was successfully attacked. On the other hand, because customers can be harmed as a result. Which can also have legal consequences. This can be prevented.

With a monitoring solution, you can monitor both your IT and your OT, the operational technology. This ranges from simple sensors and valves to robots and machines on the assembly line. It would continuously monitor whether limit values are being adhered to and automatically sound the alarm in case of an emergency. Here, even the contents of packages can be examined on an OT-protocol basis. This means an in-depth inspection of the package. An alarm can be triggered even before the command has finally been executed. How to react to this alarm is entirely up to you. Thanks to open interfaces, you can freely decide how to react, from a simple e-mail to stopping production.

At the same time, you can also carry out an inventory and simply visualise exactly where which device is. In addition, in the event of an incident, you have forensic tools at your disposal to see where the incident originated and which path it took through the network. This allows you to see not only if something happened, but also how and from where.

In addition to the inventory, you can also have your IT and OT infrastructure checked for known security vulnerabilities. Industrial facilities in particular are often in use for many years, if not decades. Known security gaps can usually not be closed by updates. However, if you know about these gaps, you can take appropriate precautions to prevent them from being exploited.

Among others, we cooperate with the company Nozomi Networks, which has already been able to convince large corporations such as the energy provider enel or the pharmaceutical company GlaxoSmithKline with the SCADAGuardian solution.

Nozomi Networks was founded in 2013 and has since achieved over 1,000 installations with over 300,000 devices secured. Thanks to AI-powered learning, SCADAGuardian can autonomously learn your processes and thus leave the learning phase and monitor your infrastructure within a short period of time. 90% of all companies that have carried out a trial have chosen Nozomi.

If you are interested in a corresponding solution, please feel free to contact us by phone, email or our contact form.