Tis the Season for Cyber Crime: The Importance of Cybersecurity in Industry 4.0

Cyber 400 December 19, 2018

A scene we see all too often. A busy coffee shop full of patrons sipping their favourite hot beverage, with the glow of laptops and iPads eagerly using up the available free Wi-Fi. Little do they know, this ubiquitous activity can open the door for cyber criminals to steal identities, data and attack any networks they are connected to.

We have become accustomed to the availability of free Wi-Fi at these establishments, so much so that we often click to accept the terms of free internet, without heeding the dangers of using public networks. One such example occurred recently (described in an article by ZDNet – see link below for the full article) when a corporate laptop being used in a coffee shop was enough to allow a sophisticated cybercrime group to compromise an organization's entire infrastructure.

The incident began when an employee of the manufacturer took their laptop to a coffee shop and used it to visit the website of one of the firm's partners. The security researchers said the user visited the site after being directed there by a phishing email -- and that the site had been compromised by FakeUpdates, a malware and social engineering campaign affecting thousands of Joomla and WordPress sites. The malware shows users pop-ups which claim their browser software needs updating. In this instance, the laptop was then infected with the Dridex banking trojan and the PowerShell Empire post-exploit toolset. EMC 175

The security software being used by the manufacturer (the vender was not named) relied on devices being inside the corporate network to pick up threats. As the laptop was being used outside the network, this incident didn't become apparent until the laptop was back in the office -- by which time it was too late. The infected laptop then served as an entry point for the attackers to compromise the entire corporate network, allowing attackers to access dozens of systems that could be compromised by taking advantage of the user's permissions.

How many of us have simply clicked ‘ok’ when a pop-up tells us an update is available?

The coffee shop example is just one instance of how an innocent act can have big consequences, without the proper precautions and systems in place. How employees use technology is an important factor in ensuring their employer’s cybersecurity.

Critical Issues Affecting Manufacturers

An alarming percentage of small and medium-sized Canadian businesses experienced cyber incidents last year (22% of manufacturers world-wide), averaging 22 to 24 hours in downtime. The average cost of a cyber breach in Canada was $6.11 million during that same period. Overall, 48% of manufacturers have suffered from cyber-attacks, with 24% sustaining financial and other business losses.

Cyber incursions continue to grow in frequency and severity. Cyber threats have been identified as one of the most critical issues in the next 5 years, yet according to our friends at Ernst & Young, 58% of Canadian firms still say information security has little or no influence on their business strategy or plans.

Direct attacks notwithstanding, for many businesses it appears careless or uninformed employees are often the culprit for a cyber incursion.

Perhaps the most startling statistic, is 91% of respondents in the EY survey said discovery of a breach that impacted the organization would be the catalyst for increasing their cybersecurity. Waiting until after-the-fact is a complacency that industry simply cannot afford. Only 16% of Boards have sufficient information security knowledge to fully evaluate, with only 13% saying they are excellent at crisis management.

The industrial cybersecurity market is expected to grow by $10 billion through 2023. Measured by sector, manufacturing and energy are the top two critical industries targeted for cyber intrusions. More than half of manufacturers have suffered from cyber-attacks, with a quarter experiencing significant financial and business losses. It’s not just a big company problem, either. 58% of malware attack victims are categorized as small businesses.

With the acceleration of advanced manufacturing automation and robotics, machine learning/AI, blockchain and IIoT, cybersecurity is an important element to protecting your business during the fourth industrial revolution.

Best Practices

During a ‘Cybersecurity for Manufacturers’ webinar hosted by Excellence in Manufacturing Consortium (EMC) earlier this month, Scott Mossbrooks, from EMC’s Cybersecurity Team at N-Dimension recommended the following best practices for our members to check on:

Educate Staff
Inventory All Assets
Implementing Access Controls
Have a Bring Your Own Device (BYOD) Policy
Know Where Data is Stored
Maintain, Validate, Test Back-ups
Employing services such as Cybersecurity Monitoring and Vulnerability Assessment Scans

Source:

https://www.emccanada.org/newsroom/tis-the-season-for-cyber-crime

https://www.zdnet.com/article/how-one-hacked-laptop-led-to-an-entire-network-being-compromised/

Put to the Ultimate Test – Part 1: Torsion Tests by HELUKABEL

DCS Put to the Ultimate Test Part 1 Torsion Tests by HELUKABEL 1 400x275

Cables and wires in industrial robots and other moving machine parts are often required to withstand extreme stresses caused by torsion. Constant repetitive movements put materials under considerable strain. At the same time, operators expect components to function perfectly and reliably throughout their entire service life to avoid disruptions, outages and safety hazards.

For this reason, at HELUKABEL, we simulate intensive and continuous torsion stresses under realistic conditions with our high-tech testing equipment in Windsbach. We have several types of apparatus for doing this because some of our customers, for example those in the automotive industry, have very precise specifications for how a torsion test is carried out. The tests show that our cables and wires withstand speeds up to 1,000°/s, accelerations up to 2,000°/s² and torsion angles up to 720°. Hence, we make sure that each product always meets our customers’ high standards, and that they receive the impeccable quality they rightly expect from us as a leading supplier of cables, wires and accessories for more than 40 years.

What Is Torsion?

To learn the answer, click here

30 Minute Live Webinar 2:30 PM ET January 19th, 2023

With PC-based automation, you can implement applications and solutions that far exceed the functions of a classic controller. SIMATIC PC-based products offer you a flexible, innovative platform with long-term availability that give you a home field advantage when meeting the challenges of the digital factory for your machines and plants.

Festo Didactic at the Forefront of Developing Canada’s Future Work Force

DCS Festo Didactic at the Forefront of Developing Canadas Future Workforce 1 400x275

With Canadian manufacturing suffering from a growing labour shortage, the participation of industry in skills development is emerging as a vital component in hiring and retention.

The needs are stark: The Canadian Exporters and Manufacturers Association says almost 40% of its members have jobs they can’t fill. Five years from now, 60% expect to be short-staffed, especially when it comes to skilled trades. Statistics Canada forecasts the country’s labour force growth rate will remain below 0.2% for the rest of the decade, below replacement levels.

This growing shortage is affecting companies of all sizes. Already, some manufacturers acknowledge losing out on contracts because they can’t find the manpower to fulfill them.

In reality, the challenge is two-fold: to replenish and expand the workforce to help close the gap between the number of job seekers and vacancies through 2030 when the last baby boomers reach age 65, and ensure workers get opportunities throughout their careers to upgrade or add to their skillset as current technologies evolve and new ones emerge. Festo, through Festo Didactic, one of the world leading provider of equipment and solutions for technical education, intends to help Canada meet this challenge on both fronts. In essence, the approach Festo has always taken is that the learning never stops.

Product News

DCS Control Techniques Adds Wall Mount Packages 1 400x275

Control Techniques Adds Wall Mounted Packages to ...

When working with industrial pumping, such as crop irrigation or wastewater ...