April 25, 2018
Mitsubishi Heavy Industries, Ltd.
Nippon Telegraph and Telephone Corporation
NTT DATA Corporation
NTT Communications Corporation
MHI and NTT Group Begin Sales of "InteRSePT®" Cyber Security Technology Providing Safe and Secure Operation of Control Systems
-- Advanced Security at All Operating States with Low Cost and Space Savings --
Tokyo, April 25, 2018 – Mitsubishi Heavy Industries, Ltd. (MHI), Nippon Telegraph and Telephone Corporation (NTT), NTT DATA Corporation (NTT DATA), and NTT Communications Corporation (NTT Com) have commercialized "InteRSePT®"*1, a jointly developed cyber security technology for critical infrastructure control systems. InteRSePT® provides real-time anomaly detection and response for unknown cyber-attacks, contributing to safe and secure system operations. Sales of the system will begin in May. MHI and NTT are actively developing markets for the technology in commercial fields where continuous availability*2 is critical, such as thermal power generation facilities and chemical plants.
1. Background to the Development
In addition to the existing security countermeasures, such as IDS / IPS*3 and firewalls*4 to prevent cyber-attacks from malware*5 and DDoS*6, in recent years measures have become necessary to counter advanced cyber-attacks that monitor the operating characteristics and control commands of the target device, and change the timing of network communication or contents of commands to cause the target device to fail.
MHI and NTT, in response to growing needs, began research and development on security technologies in March 2016. The InteRSePT® prototype was completed in November that year, combining the highly reliable and safe control technologies developed by MHI for the fields of defense and space, with security control technology*7 developed by NTT.
Evaluation of the prototype and conformance testing for control systems was then conducted at Cyber Lab, MHI's facility in Tokyo for security development and testing. The functionality of InteRSePT® was further improved and the range of applications broadened to include the operations and maintenance (O&M) businesses. This led to commercialization and the launch of sales.
2. Features of InteRSePT®
InteRSePT® comprises a real-time network monitoring system (RNMS) and a security management system (SMS). The system monitors sensor information and other data flows in networks in an integrated manner, and detects cyber-attacks that exploit control commands, which are difficult to detect and respond to with conventional technology. By changing the security remediation rules on each operating state of the target device, the system provides early detection of anomalies, and allows for a rapid response to even unknown cyber-attacks while maintaining availability. (Joint patent pending)
InteRSePT® is able to provide detailed confirmation of control system networks, and offers exceptional compatibility with a wide range of industrial facilities and devices.
InteRSePT® conceptual diagram
(1) The system collects and analyzes packets of sensor information flows in the control system network to determine the operating state.
(2) The communication control rules of the RNMS are changed according to the actual operating state and other factors.
(3) Packets are analyzed, and blocked or passed based on the rules.
(4) Multiple sensor information is aggregated in the SMS, and the behavior of the entire control system monitored in an integrated manner to allow for early detection (behavior detection processing*8), and a rapid response to even unknown cyber-attacks.
For the productization, RNMS utilizing commercial-off-the-shelf hardware and integrated with network switch provides low cost, space savings and easier system installability. In addition, the SMS improved its behavior detection processing speed by adopting distributed processing.
4. Role of each company
|MHI||Sales of InteRSePT®
Development of data analysis, operational status estimates, and anomaly detection methods according to the control system, as well as handling and recovery methods, and design optimization
|NTT||Provide security control technology and RNMS developed by the NTT|
|NTT DATA||Support market development for security solutions based on the InteRSePT® system developed by MHI and the NTT Group|
|NTT Com||Development of technologies related to data accumulation and anomaly detection necessary for market application of the NTT's core technologies, and productization of security solutions|
5. Future plans
Going forward, MHI NTT, NTT DATA, and NTT Com will cooperate to promote InteRSePT®'s low cost, advanced functionality, fast processing capabilities, and easy installability to a wide range of industries, as well as propose individual security solutions, and develop markets.
Further, we will effectively utilize the aggregated and analyzed sensor data from InteRSePT® to not only security countermeasures but also operational parameters optimization and preventive maintenance to reduce time required for maintenance. We will develop an O&M total solutions business to help enhance operational efficiency for customers.
*1 InteRSePT®: Abbreviation of Integrated Resilient Security and Proactive Technology – a registered trademark of MHI, in Japan
*2 Availability: Continuous operation of a system without stoppage
*3 IDS / IPS: Intrusion Detection System / Intrusion Protection System-systems to detect and protect against cyber intrusions
*4 Firewall: System for discrimination and reporting of unauthorized access
*5 Malware: Abbreviation of malicious software
*6 DDoS: Distributed Denial of Service attack
*7 Security control technology: Technologies that collect and analyze cyber-attack related information including target device / system status and anomaly events, and comprehensively control diversified security appliances
*8 Behavior detection processing: Detection of behaviors in a device or system different from its normal operating status
About Mitsubishi Heavy Industries Group
Mitsubishi Heavy Industries, Ltd. (MHI), headquartered in Tokyo, is one of the world's leading industrial firms with 80,000 group employees and annual consolidated revenues of around 38 billion U.S. dollars. For more than 130 years, the company has channeled big thinking into innovative and integrated solutions that move the world forward. MHI owns a unique business portfolio covering land, sea, sky and even space. MHI delivers innovative and integrated solutions across a wide range of industries from commercial aviation and transportation to power plants and gas turbines, and from machinery and infrastructure to integrated defense and space systems.
For more information, please visit MHI's website: www.mhi-global.com
For Technology, Trends and Tangents, visit MHI's new online media SPECTRA: spectra.mhi.com
About Nippon Telegraph and Telephone Corporation
NTT Group delivers advanced technology and innovative solutions in networking, communications, software and cloud computing that help transform businesses, governments and societies around the world. NTT Group will deliver convenient, enriched and reliable services to support customers as a "Value Partner" that its customers will continue to select. Today, 80% of Fortune 100 companies rely on NTT Group as their business partner. NTT Group generates over $105 billion in annual revenues, has over 233 data centers and employs more than 240,000 professionals working in 88 countries.
For more information, visit http://www.ntt.co.jp/index_e.html
About NTT DATA Corporation
NTT DATA is a leading IT services provider and global innovation partner headquartered in Tokyo, with business operations in over 50 countries. Our emphasis is on long-term commitment, combining global reach with local intimacy to provide premier professional services varying from consulting and systems development to outsourcing. For more information, visit www.nttdata.com.
About NTT Communications Corporation
NTT Communications provides consultancy, architecture, security and cloud services to optimize the information and communications technology (ICT) environments of enterprises. These offerings are backed by the company’s worldwide infrastructure, including the leading global tier-1 IP network, the Arcstar Universal One™ VPN network reaching over 190 countries/regions, and over 140 secure data centers worldwide. NTT Communications’ solutions leverage the global resources of NTT Group companies including Dimension Data, NTT DOCOMO and NTT DATA.
www.ntt.com | Twitter@NTT Com | Facebook@NTT Com | LinkedIn@NTT Com
For more information
Public Relations Group, Corporate Communication Department
Research and Development Planning Department,
Produce Section (Security)
Public Relations Department