NIST out with draft cyber guide for manufacturing industry

Government scientists are seeking industry input on a project that will produce design blueprints to help manufacturers and chemical plants use special computerized production processes that are secure from online attacks.

Government scientists are seeking industry input on a project that will produce design blueprints to help manufacturers and chemical plants use special computerized production processes that are secure from online attacks.

In a release Monday, the National Cybersecurity Center of Excellence said they were seeking comment by Dec. 7 on their draft project description: Capabilities Assessment for Securing Manufacturing Industrial Control Systems.

Industrial control systems, or ICS, are specialized IT systems — with both software and hardware elements — that run industrial processes. Because ICS controls physical plant like factory assembly lines or chemical processing, hackers can have real world effects by attacking it.

“A cyberattack directed at a manufacturing organization’s infrastructure could result in detrimental consequences to both human life and property,” said NCCoE — part of the National Institute of Standards and Technology — in the release.

The draft assessment is the first of four that NCCoE plan to produce — each resulting in a practical guide called a design reference — to help manufacturers set up their systems in a secure fashion, using commercially available cybersecurity tools.

The four topics they’ll cover are:

• Behavioral Anomaly Detection — monitoring a computer network looking for unusual traffic or other phenomena;

• ICS Application Whitelisting — allowing only authorized apps to run on an ICS system;

• Malware Detection and Mitigation — finding and stopping malicious programs; and

• ICS Data Integrity — ensuring that the data produced by ICS equipment is an accurate reflection of what’s really going on inside the machinery.

“With these capabilities in place, manufacturers will find it easier to detect anomalous conditions, control what programs and applications are executed in their operating environments, mitigate or vanquish malware attacks, and ensure the integrity of critical operational data,” the draft assessment states.

The NCCoE will develop the guides by deploying commercially available behavioral anomaly detection tools in two test environments — small-scale lab replicas of real manufacturing systems. One is a robotic assembly line “in which industrial robots work cooperatively to move parts through a simulated manufacturing operation … according to a plan that changes dynamically based on process feedback,” the draft states. The second is a simulated chemical process enclave.

NCCoE and NIST engineers will map the security characteristics of behavioral anomaly detection to the NIST Cybersecurity Framework, enabling manufacturers to work out which security standards deploying those tools will help them meet.

The reference design document that will eventually result will “demonstrate how manufacturing companies can implement the capability in their own operational environments.”

Government

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure