1661881173207 Usbthreatreport300dpi

USB Media Devices Pose Significant Cyber Security Threat

Nov. 6, 2018
Of 50 industrial locations studied, nearly half faced threats from removable USB media devices.

New research from Honeywell shows that removable USB media devices pose a significant and intentional cybersecurity threat to industrial process control networks.

New research released by Honeywell shows that removable USB media devices such as flash drives pose a significant – and intentional – cybersecurity threat to a wide array of industrial process control networks, according to the company. Data derived from Honeywell technology used to scan and control USB devices at 50 customer locations shows that nearly half (44%) detected and blocked at least one file with a security issue. It also revealed that 26% of the detected threats were capable of significant disruption by causing operators to lose visibility or control of their operations.

The threats targeted a wide variety of industrial sites, including refineries, chemical plants and pulp-and-paper manufacturers around the world, and the threats themselves ranged in severity. About 1 in 6 targeted industrial control systems or Internet of Things (IoT) devices. 

“This research confirms what we have suspected for years – USB threats are real for industrial operators,” says Eric Knapp, director of strategic innovation, Honeywell Industrial Cyber Security. “What is surprising is the scope and severity of the threats, many of which can lead to serious and dangerous situations at sites that handle industrial processes.”

The research reportedly marks the first commercial report to focus exclusively on USB security in industrial control environments. It examines data collected from Honeywell’s Secure Media Exchange (SMX) technology, which is specifically designed to scan and control removable media, including USB drives. Among the threats detected were high-profile, well-known issues such as TRITON and Mirai, as well as variants of Stuxnet, an attack type previously leveraged by nation-states to disrupt industrial operations. In comparative tests, up to 11% of the threats discovered were not reliably detected by more traditional anti-malware technology. The research, which is presented in the Honeywell Industrial USB Threat Report, recommends that operators combine people training, process changes, and technical solutions to reduce the risk of USB threats across industrial facilities.  

“Customers already know these threats exist, but many believe they aren’t the targets of these high-profile attacks,” Knapp says. “This data shows otherwise, and underscores the need for advanced systems to detect these threats.”

For more information, visit: www.honeywell.com

Sponsored Recommendations

Keys to Improving Safety in Chemical Processes (PDF)

Many facilities handle dangerous processes and products on a daily basis. Keeping everything under control demands well-trained people working with the best equipment.

Get Hands-On Training in Emerson's Interactive Plant Environment

Enhance the training experience and increase retention by training hands-on in Emerson's Interactive Plant Environment. Build skills here so you have them where and when it matters...

Managing and Reducing Methane Emission in Upstream Oil & Gas

Measurement Instrumentation for reducing emissions, improving efficiency and ensuring safety.

Micro Motion 4700 Coriolis Configurable Inputs and Outputs Transmitter

The Micro Motion 4700 Coriolis Transmitter offers a compact C1D1 (Zone 1) housing. Bluetooth and Smart Meter Verification are available.