New Vulnerability Assessment Tool from Toshiba and Peraton Labs Strengthens Cyber Resilience of Infrastructure
Identifies critical cyber security threats on industrial control systems
TOKYO—Toshiba Corporation (TOKYO: 6502) and Peraton Labs today announced a new jointly-developed vulnerability assessment tool that emulates cyberattacks on industrial control systems. Dubbed Automated Attack Path Planning and Validation (A2P2V), this powerful new tool automatically generates cyberattack scenarios and simulates attacks that combine advanced offensive techniques to test and determine control system security status. It verifies results to identify security threats that need to be prioritized among the increasing number and range of cyberattacks.
A2P2V combines industrial control system configuration data with various publicly available attack techniques, and automatically generates and executes cyberattack scenarios that verify the strength of the system’s security. Toshiba and Peraton Labs have successfully demonstrated automated attacks in a simulated environment that revealed security flaws. By identifying industrial control systems vulnerabilities that can be attacked, A2P2V supports the identification of security threats that must be prioritized among the increasing number of cyberattacks and raises the ability to respond.
Takashi Amano, General Manager, Cyber Security Center, Toshiba Corporation remarks, “As Thailand enhances the country’s digital infrastructure to boost competitiveness in the industrial and business environments, the need to safeguard its critical assets against cyber threats becomes even more important. Toshiba’s new vulnerability assessment tool has an important feature to accurately identify and prioritize security threats by emulating cyber attacks on industrial control systems. Since last November at CEBIT ASEAN Thailand 2020, which I shared about Toshiba’s cybersecurity solutions, this research breakthrough is a step forward in our commitment to strengthen the cyber resilience of infrastructure globally.”
“With more and more devices connected to networks, cyber threats have now expanded to include industrial control systems and products, which traditionally operated in a safe and enclosed environment,” said Yutaka Sata, Ph.D., Corporate Officer and Director of Corporate Research & Development Center, Toshiba Corporation. “Toshiba provides various products and solutions for critical infrastructure, and is responsible for keeping them secure even if they are connected to external networks. With A2P2V and other security technologies, Toshiba will ensure their robustness against evolving cyberattacks.”
“With the increasing volume and sophistication of cyberattacks, the ability to create novel attack scenarios and prioritize threats is essential for protecting critical infrastructure and industrial control systems,” said Petros Mouchtaris, Ph.D., president, Peraton Labs. “As a leader in cyber research, Peraton Labs looks forward to the continued development of innovative tools and solutions to defend industrial, military and commercial infrastructure from complex, multi-faceted attacks.”
Figure 1: Concept of A2P2V
Author
