Stuxnet, Duqu, Flame, BlackEnergy, Energetic Bear. The list goes on and on, if you haven't heard of these threats do a quick google search, the number of industrial threats grows with each and every passing week.
What's a person supposed to do to protect themselves against an ever growing list of threats like this?
That's where we come in to help. The department of homeland security has a list of suggestions you can implement to help protect your system. One of those suggestions is to reduce your attack surface, the absolute best way to do this, is with a data diode.
What is a Data Diode?
Glad you asked. According to Wikipedia:
A unidirectional network(also referred to as a unidirectional security gateway or data diode) is a network appliance or device allowing data to travel only in one direction, used in guaranteeing information security. They are most commonly found in high security environments such as defense, where they serve as connections between two or more networks of differing security classifications. This technology can now be found at the industrial control level for such facilities as nuclear power plants, and electric power generation.
The problem with this statement is that it says "most commonly found in high security environments" meaning it probably isn't found in your facility, therefore increasing your chances of having a cyber incident. With the increase in threats, more facilities need to harden their systems against the types of attacks listed in the opening of this article, and the best way to do that is with a defence-in-depth approach.
There is no silver bullet solution, data diodes are only part of a solution. Coupled with firewalls, network security appliances, and personnel training programs, you can help to reduce your attack surface and protect your facilities.
For more information, visit our Get Secured page.