Story image

Fujitsu Labs takes network control approach IoT security

29 May 18

Fujitsu Technologies has developed a new kind of network control technology that is able to secure IoT devices installed in the field.

According to the company, it technology analyses and manages interconnectivity between IoT devices and network devices, based on operating information collected in gateways.

This responds to changes in network structure so it can spot IoT devices that may be behaving in a suspicious way.

Fujitsu Laboratories also developed the technology so that can control communication blocks. The technology can be used in cases where an IoT device is infected in malware and started to attack other devices. The technology can detect that communication by comparing ordinary communication routes through a gateway with the actual routes.

A statement from Fujitsu Laboratories says that IoT adoption has been increasing in many industrial fields, particularly as sensors and manufacturing equipment become connected to networks.

IoT devices have also been damaged by malware attacks worldwide, which has created an urgent need for security countermeasures in IoT devices.

“In many cases, however, IoT devices do not support antivirus software due to CPU, memory, or OS restrictions, and even if antivirus software is deployed, often software updates that require the device to be rebooted are not executed as the IoT device cannot be stopped while in operation. Due to these factors, the current situation is that many IoT devices are operating with insufficient security measures.”

While some vendors have suggested using gateways to separate IoT networks from other networks, however cyber attacks don’t necessarily need to use gateways. If a device is infected with malware and connected inside the network, it’s not possible to protect them from cyber attacks, Fujitsu Laboratories says.

The company approached IoT security from a network topology viewpoint, in which technology can “collect operating information about IoT devices and network devices from gateway devices, deduce the topology of the network the IoT devices are connected to, and appropriately control the network devices based on this information”.

The company tested the technology using a fake malware variant and found that its technology could minimize the impact of cyber attacks when it is installed in gateways.

“With this technology, it will be possible to provide secure operations using existing setups, without exchanging or deploying new IoT devices with security countermeasures in sites such as factories, which require the continued operation of production equipment with long service lifespans.”

Fujitsu Laboratories says it plans to commercialize the technology during fiscal 2018 as gateway functionality for the Fujitsu Network Virtuora series of network products. The company will also continue to develop the technology.

Cisco expands security capabilities of SD­-WAN portfolio
Until now, SD-­WAN solutions have forced IT to choose between application experience or security.
AlgoSec delivers native security management for Azure Firewall
AlgoSec’s new solution will allow a central management capability for Azure Firewall, Microsoft's new cloud-native firewall-as-a-service.
How to configure your firewall for maximum effectiveness
ManageEngine offers some firewall best practices that can help security admins handle the conundrum of speed vs security.
Exclusive: Why botnets will swarm IoT devices
“What if these nodes were able to make autonomous decisions with minimal supervision, use their collective intelligence to solve problems?”
Why you should leverage a next-gen firewall platform
Through full lifecycle-based threat detection and prevention, organisations are able to manage the entire threat lifecycle without adding additional solutions.
The quid pro quo in the IoT age
Consumer consciousness around data privacy, security and stewardship has increased tenfold in recent years, forcing businesses to make customer privacy a business imperative.
ForeScout acquires OT security company SecurityMatters for US$113mil
Recent cyberattacks, such as WannaCry, NotPetya and Triton, demonstrated how vulnerable OT networks can result in significant business disruption and financial loss.
Exclusive: Fileless malware driving uptake of behavioural analytics
Fileless malware often finds its way into organisations via web browsers (or in combination with other vectors such as infected USB drives).