Story image

Exclusive: How nation-state attacks impact businesses

13 Aug 2018

With tensions between global superpowers rising, cyber attacks have become a new frontier for governments to gain an advantage over one another.

SecurityBrief spoke to PAS Global CEO and industrial cybersecurity veteran Eddie Habibi about nation-state attacks, the motivations behind them, and how organisations get caught in the crossfire.

How do nation-state cyber attacks affect businesses?

Nation-state cyberattacks pose a significant risk to businesses, ranging from theft of high-value intellectual property (IP) to complete shutdown of operations and irreparable damage to brand reputation.

Nowhere is this risk more prominent today than in critical infrastructure.

A cyber attack on the digital industrial control systems that enable safe operations can be manipulated to cause physical damage to a process, power, or manufacturing plant.

What form do these attacks usually take?

Nation-states have shown a great deal of interest in attacking the institutions and industries that define the strength of a nation.

That includes everything from manipulation of social attitudes about hot political topics to the disruption of electricity services by shutting down the power grid.

What are the typical motivations of a nation-state attack?

While it is difficult to speculate the exact reasons for any single nation-state attack, it is generally recognised that cyber attacks are a new, inexpensive, and stealth weapon of choice that can potentially cripple an economy and create chaos in a sustained multi-channel attack.

At this stage, I believe most nation-states are hard at work developing both offensive and defensive cyber weapons as a means of survival for the inevitable.

What can businesses do to prepare for the impact of such attacks?

Businesses must take a strategic approach to cybersecurity, especially in the critical infrastructure.

While being wary of the hype, businesses must also recognise that the Pandora’s box has been opened and there is no turning back.

A robust cybersecurity strategy, especially for operational technology (OT) assets, starts with industrial endpoint protection.

At the heart of endpoint protection is configuration security management.

Configuration security includes establishing an accurate and complete inventory of control system assets, identifying and addressing known vulnerabilities, institutionalising a strict management of change process, and securing an evergreen backup.

This is known as foundational security.

The rest of the security stack includes anomaly and threat detection, firewalls and access control, antivirus and more.

What are common misconceptions businesses usually have about these attacks?

The greatest misperceptions about cybersecurity risk associated with industrial control systems (ICS) include:

  •  my ICS is “air-gapped” (not connected to the Internet) and therefore secure;
  •  traditional IT security protection measures are adequate for protecting industrial control systems (ICSs)
  •  and most concerning is, IT alone, without the close involvement of OT experts, can solve the problem
Why SD-WAN is key for expanding businesses - SonicWall
One cost every organisation cannot compromise on is reliable and quick internet connection.
New threat rears its head in new malware report
Check Point’s researchers view Speakup as a significant threat, as it can be used to download and spread any malware.
Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.