securitylinkindia

MassMediaLink India LLP SecurityLink India

Fortinet Highlights a Rise in Cyber Attacks

The findings of Fortinet 2019 Operational Technology Security Trends Report, analyzing data gathered from millions of Fortinet devices to discern the state of cybersecurity for supervisory control and data acquisition (SCADA) and other industrial control systems (ICS), found many attacks on OT systems that seems to target older devices running unpatched software. It indicated that OT networks are increasingly being targeted by IT-based legacy attacks that are no longer effective against IT networks. The report also highlights a rise in purpose-built OT attacks designed to target SCADA and ICS systems. The majority of these attacks tend to target the weakest parts of OT networks often taking advantage of the complexities caused by a lack of protocol standardization and a sort of implicit trust that seems to permeate many OT environments. This trend is not limited to specific sectors as threat actors targeting OT environments did not discriminate according to industry or geography, as every vertical and region saw a significant rise in attacks. Key findings from the Fortinet 2019 Operational Technology Security Trends Report: Exploits increased in volume and prevalence in 2018 for almost every ICS/ SCADA vendor. In addition to the recycled IT attacks being thrown at unpatched or non-updated OT devices, 85% of unique threats detected targeted machines running OPC Classic, BACnet and Modbus. Cybercriminals targeted devices by exploiting the wide variety of OT protocols in place – many of which are specific to functions, industries and geographies. Due to the prevalence of legacy protocols and the slow replacement cycle for OT systems to deploy new architecture cybercriminals have actively attempted to capitalize by targeting the weak links in each protocol. These structural problems are exacerbated by the lack of standard protections and poor security hygiene practiced with many OT systems. Custom OT attacks are also on the rise. Malware targeting ICS and SCADA systems have been developed and deployed for a decade or longer. Attacks specifically designed for OT systems seem to be on the rise, with safety systems increasingly a target. A handful of OT-based attacks over the past decade have managed to make headlines, including Stuxnet, Havex, BlackEnergy and Industroyer. Most recently, Triton/ Trisis targeted safety instrumented system (SIS) controllers which is the first true cyber-physical attack on OT systems. Ransomware continues to attack OT systems: As of late 2018, ransomware attacks on IT systems have declined and many threat actors appear to have ‘moved on’ to other types of attacks like cryptojacking. However, cybercriminals tend to recycle existing malware to attack OT systems. This may suggest that ransomware will be a bigger threat for OT systems than for IT ones in the near term. Attacks on heating, ventilation and air conditioning (HVAC) systems and electrical grids are more likely to occur when these systems are operating at peak usage – most often during the Northern Hemisphere’s summer months. The age of an OT system is also a factor, with adversaries tending to target older technology more frequently than newer. As OT systems become more connected, the trend of increased attacks seems likely to continue. This new exposure requires organizations to adhere to more rigorous security operations and life-cycle management best practices to protect their organizations from major threats to the core of their business. As a result, OT and IT teams need to come together to respond comprehensively to increasing threats. Michael Joseph, Director System Engineering, India & SAARC at Fortinet said, “Malicious actors are able to extract maximum value from each new threat they develop by exploiting unprotected OT systems and vulnerabilities that persist in both older and newer networks and technologies. IT integration and convergence due to digital transformation efforts will continue to pressure this situation further. The best way to counter this new reality is by adopting and implementing a comprehensive strategic approach that simplifies the solution and involves IT and OT experts throughout an entire organisation.”  

Read More

IDEMIA is the first Certified Card Manufacturer in India

IDEMIA is the first and, to date, only one to be certified to manufacture and personalise RuPay chip contact and contactless cards, on the qSPARC v2 platform. “This certification recognizes IDEMIA’s commitment to continually invest in the development of technologies for enhancing and securing the payment experience for Indians and establishes once again our leadership in this space. This qSPARC certification will increase the usability of bank issued cards with an enhanced value proposition for all stakeholders” – Sanjeev Shriya Regional President for IDEMIA’s Activities in India qSPARC is a dual interface open loop payment specification, with the option of loading multiple payment applications on a single card. This certification is issued by NPCI, after testing all payment scenarios and thus ensuring that the cards manufactured by IDEMIA will work seamlessly at all payment acceptance devices. The cardholders get the convenience of using a single card for multiple payment use cases such as metro, bus, toll, loyalty, parking and payments at retail. There is an option of loading up to 20 such payment applications on a single card. The qSPARC is likely to steer the national common mobility card (NCMC) and will be widely used in the smart cities. The first version of this card is deployed in kochi metro, Bangalore bus transport, Ahmedabad smart city, and will soon be delivered to prospective customers in Nagpur, Noida metro and Navi Mumbai bus transport ticketing. As of now, more than 1.5 million cards have been issued.  

Read More

Matrix SATATYA MIBR20FL60CWP

Matrix Professional Series IP bullet cameras are built using superior components such as Sony STARVIS sensor and higher MTF lens to offer unmatched image quality especially during low light conditions. Powered by true WDR algorithm, these cameras offer consistent image quality even in highly varying lighting conditions. Built-in intelligent analytics including intrusion detection, trip wire etc., they ensure real-time security. Moreover, H.265 compression and automatic motion based frame rate reduction save bandwidth and storage up to 50%. The series features wider 56° horizontal field of view, adaptive streaming to record more frames during motion, less during no motion. They are ideal for special applications such as parking management and other outdoor applications.  

Read More

Grandstream and Savex Technologies Announce Distribution Partnership in India

Grandstream has appointed Savex Technologies Pvt. Ltd. as a distributor of its wireless networking and unified communications solutions in India. Customers throughout India can now purchase Grandstream Networks’ award-winning solutions from Savex Technologies, which have been connecting the world since 2002 and include a comprehensive, feature-rich range of SIP handsets and Wi-Fi access points. “This distribution agreement with Savex Technologies signals the start of an exciting time for resellers in India and for Grandstream,” said Ajeet Singh, Country Sales Manager, India for Grandstream, “There’s a huge opportunity for growth and profit for our partners in the mid-market, but that opportunity is all too-often overlooked with vendors focusing on larger enterprise customers or providing solutions that don’t deliver the scalability, resiliency and flexibility the mid-market businesses are looking for. Together with Savex Technologies and their solid reseller support capabilities, geographical reach, years of competency, expertise and market knowledge, we can more effectively reach the channel, enabling resellers to leverage our on-premise and cloud-based Unified Communication solutions and create offerings that meet today’s digital business needs. We look forward to growing the market and technology landscape by serving our valued channel partners in India.” Savex and Grandstream both strive to deliver Wi-Fi networking solutions and feature-rich unified communication solutions that are easy and attainable to businesses of all sizes, and this partnership offers a cost-effective solution that is easy to deploy and includes high-end features to resellers throughout India. “We are pleased to collaborate with Grandstream and showcase its product and services to our reseller base,” said Anil Jagasia, Founder and Chairman of Savex Technologies Pvt Ltd., “The Grandstream portfolio will enhance our capabilities and enable us to deliver its technology to our reseller base, ultimately supporting our mutual customers and helping to ensure success in this fast-growing market.”  

Read More

Gallagher Gives Security Customers Free Auditing Tool

Gallagher has recently released a cyber security auditing tool – and they’re giving it away to their customers for free. Gallagher’s Security Health Check (SHC) tool is designed to help Gallagher customers identify and understand potential vulnerabilities within their security system. Gallagher’s customers can use the SHC utility to run an automated check via their Gallagher Command Centre system at any time, reducing the time and expense of performing regular manual audits. SHC identifies system vulnerabilities, assesses the severity of the threat, and provides specific recommendations to mitigate the risk and ensure correct system configuration. It also provides a mechanism to compare against earlier audit results to ensure organisations can track improvement over time and better plan system upgrades. Gallagher dedicates significant resource to the research and development of cyber-secure solutions, and has a commitment to helping customers gain full visibility and a deep understanding of how their security system works. “We designed security health check to give sites ownership of the state of their system,” said Steve Bell, Chief Technology Officer at Gallagher, “Security risks and system vulnerabilities aren’t static, it’s important to us to promote and support a culture of ongoing improvement within our industry.” SHC proactively addresses the ever evolving threat of cyber-attack, while supporting sites to protect the data held within their access control system. “Security systems can be vulnerable to cyber attacks for a variety of reasons, and the consequences can be significant,” said Bell, “A cyber breach via security systems can potentially allow access to personal data, restricted areas and intellectual property; it could also lead to unauthorized control over HVAC, lighting and building systems in order to disrupt operations.” Gallagher believes that in today’s world of evolving threats, it’s no longer enough to supply the tools and walk away. As the leading security system manufacturer to offer a system audit tool of this kind, Gallagher hopes to inspire the security industry to become more transparent with its customers and empower them to better understand their vulnerabilities.  

Read More

Hikvision’s IP Surveillance Solution Secures Indofil Plant

Indofil Industries Limited, a part of the K. K. Modi group, has a very strong domestic base and a well-recognized international presence. Both businesses viz., agricultural chemicals and specialty and performance chemicals, are poised for much faster growth through partnerships and joint ventures for manufacturing, marketing and research, and development activities with prospective companies across the world. Indofil plant is situated in the industrial cluster at Dahej, Gujarat. The Dahej industrial facility is spread in a vast area with special requirements for industrial safety and security measures. Indofil has four manufacturing facilities producing multi products with the state-of-the-art PLC (Programmable Logic Control) and DCS (Distributed Control System) based systems, and multiple toll manufacturing units across various parts of India. The manufacturing processes are automated with advanced systems and environmentally compliant machines, ensuring faster throughput and safe working conditions. Indofil expanded its manufacturing facilities in Gujarat state by adding Mancozeb mixtures and new fungicide molecules by commissioning 2 manufacturing plants at Dahej, SEZ (Special Economic Zone, ranked among the top 10 SEZs in the world by Financial Times, London) and 1 manufacturing unit at Dahej, GIDC location. The increased production capacity has helped Indofil in reducing the process cost. Security requirements Indofil management wanted a surveillance solution, which is proactive rather than reactive. The management brief was that surveillance solution must cover critical plant area, process area, periphery and internal roads. It is necessary that the solution must be strategic and must have RoI (return on investment) in terms of maintaining safety standards and preventing accidents for the safety of most important human, machinery and assets. Solution Hikvision along with system integration partner Technology Quotient (Anjani Communications) provided a robust IP video surveillance solution to Indofil’s Dahej plant by doing elaborate planning and sleek execution. They executed endto-end surveillance project right from the site survey, defining objective, designing and implementation. Since this is a hazardous chemical zone, Hikvision along with its SI partner selected enterprise level flame proof H.265+ based IP cameras, RAID based NVRs, VMS software, commercial displays at two separate plants within a premise, and video wall and enterprise LAN infrastructure at command and control center. “Indofil management wanted surveillance to start right from the commissioning of the plant. Since the plant was just being commissioned, we had a challenge of local resources and to visualise the pain area – both before the plant actually starts production, and also to scale up to the aspirations and objectives after the plant is up and running,” said Kalpesh Sharma, Director, Technology Quotient (Anjani Communications), “With defined objective of surveillance to be proactive rather reactive, we froze specifications based on site survey and models for surveillance camera, NVR, recording duration required and displays.” “Once the quantity of cameras, displays and video wall requirements were finalised, we designed and devised robust LAN infrastructure, keeping in mind optimal load sharing and load balancing for future seamless scaling without reinventing the wheel during future expansion. We not only met the objective but also exceeded the expectation of Indofil Ltd. as a corporate client, thanks to Amardeep Kolekar, Chief Manager, Engineering, Indofil Ltd. for his timely support,” added Kalpesh, “In the command control centre, we specifically designed a video wall for CCTV surveillance feed. We also trained and prepared a dedicated team to monitor whole Indofil plant at Hikvision’s state-of-the art training center.” “For Indofil project, we worked on a special customized solution with our SI partner, Technology Quotient (Anjani Communications) to fulfill the requirements specified by the end-user. We are happy to add value through our latest products and solutions in the chemical industry,” said Siddhesh Kadam, Vertical Head, Pharma, Prama Hikvision India Pvt. Ltd. “Overall Technology Quotient (Anjani Communications) has provided a good economical solution for our CCTV and video wall requirements. The service was excellent and we got the proper support in time. Our employees also have undergone a training to avoid any delay in case of breakdown,” said Amardeep Kolekar, Chief Manager, Engineering, Indofil Ltd., “Apart from other vendors, technologically we got a better solution through Technology Quotient (Anjani Communications). They provided a proper approach along with a good economical solution for us. The performance of the Hikvision’s video surveillance system is very good. We would prefer them for our future requirements.”  

Read More

Dahua Technology Joins the Open Security & Safety Alliance

Dahua Technology, a world-leading video-centric smart IoT solution and service provider, recently announced its membership in the Open Security & Safety Alliance (OSSA) – a non-profit, non-stock corporation that brings together like-minded organizations who are willing to contribute to a framework, providing standards and specifications for a common standardized platform for security and safety solutions. Dahua Technology joins OSSA at the Contributor level to accelerate the development of the open ecosystem. “OSSA is a great platform approach to build an Android-based IoT ecosystem alongside key players in our industry including equipment suppliers, software developers, chipset suppliers and others,” said Gao Jiaqi, Overseas Marketing Director at Dahua Technology, “We are glad to become a part of this Alliance, and Dahua Technology is committed to cooperate with the key players in the industry. Dahua Technology with its solid knowledge in both hardware and algorithm aims to bring true values for end users.” The Open Security & Safety Alliance: Driving a common approach OSSA was formed in reaction to today’s market characterized by the continued evolution of the Internet of Things and the aggregation of data. Security and safety solutions are fragmented due to the lack of a collaborative approach to common challenges including cyber security and common operating systems. This is holding back innovation and seamless integration. In order to add real value for customers, the market needs a new direction and a framework that will enable relevant market players to focus on innovation and development of new applications that deliver value add for users and customers. Benefits of joining OSSA include access to the Alliance framework and the possibility to connect, discuss, influence and collaborate with other Alliance members to help shape a new direction for the industry. Participants share best practices and contribute to a common framework ‘for the industry by the industry.’ Together, OSSA members are providing standards and specifications for common components including an operating system, IoT infrastructure, collective approach for data security and privacy, and a drive for improved levels of performance across products, solutions and services. “Shifting the security systems market to where we’re all working from a common platform and operating system will transform our security and safety market with regards to reducing friction, fueling innovation and raising the bar regarding data security and performance,” said Johan Jubbega, President, Open Security & Safety Alliance, “The work we are doing together through OSSA is solving many of the pain points we’ve felt for a long time throughout our industry, and having leaders like Dahua Technology join us to lend their support and video surveillance expertise will further drive improvements and innovation to benefit stakeholders and users alike.”  

Read More

Genetec Partners with BlackBerry Cylance to include AI-based Antivirus in its Appliance Portfolio

Genetec Inc. is partnering with Cylance, a business unit of BlackBerry, Limited to bring AI-based antivirus protection to its appliances customers. Through this partnership, Genetec will offer additional cybersecurity protection to its Streamvault™ family of infrastructure solutions by including CylancePROTECT® out-of-the-box at no additional cost to its customers. Genetec Streamvault all-in-one and rackmount appliances, storage and workstations are expected to be shipped pre-installed and optimized with CylancePROTECT in September 2019. “Genetec is committed to creating secure solutions from the ground up and have practices in place to help identify and mitigate risk for our customers. Cybersecurity is at the core of our development process and we see that cyberthreats are evolving faster than ever. With CylancePROTECT, Genetec is delivering the latest in prevention-first, predictive security technology to Streamvault customers and providing them with up-to-date protection, without compromising appliances guaranteed performance,” said Francis Lachance, Director, Video and Appliances at Genetec. CylancePROTECT protects endpoints and organizations from compromise by combining the power of artificial intelligence to block malware infections with additional security controls that safeguard against script-based, file-less memory, and external device-based attacks. Unlike traditional endpoint security products that rely on signatures and behavior analysis to detect threats in the environment, CylancePROTECT uses machine learning, not signatures, to identify and block known and unknown malware from running on endpoints. The software delivers prevention against common and unknown (zero-day) threats without an internet connection. It continuously protects an endpoint without disrupting the end-user and provides minimal impact on system resources. “For years, traditional antivirus prevention products relied on signatures as their primary threat protection method. Assuming all attacks on business had been seen before, using signatures made sense. However, today, malware mutates daily, even hourly, making signature-based prevention tools obsolete. In mission-critical industries such as the physical security industry, organizations need to think beyond traditional antivirus. We are pleased to partner with Genetec as we share the same passion for protecting our customers against cyber-attacks,” said Steve Rossi, Global Director of OEM sales at Cylance. Because it uses very little computing power, CylancePROTECT will not affect the smooth running of Genetec appliances, allowing customers to benefit from proactive threat detection without monopolizing crucial resources. In addition, with no Internet connection or signature updates required, CylancePROTECT will protect remote endpoints connected to the Genetec system.  

Read More

Hikvision Launches New Technology Partner Program Portal

Hikvision has launched the new technology partner program portal (TPP Portal) which is designed to enhance collaboration with technology partners and system integrators, enabling development of new and innovative solutions for customers across all markets, and further drive market growth. Technology partners can use the marketing capabilities of the portal to grow their businesses, taking full advantage of Hikvision’s global reach. Equally, systems integrators can also use the portal to learn more about Hikvision technology, to build new relationships with Hikvision’s technology partners. Jens Berthelsen, Global Partner Alliance Manager at Hikvision said, “Hikvision has a long-term strategy of working closely with technology partners and systems integrators to build the best possible offerings for customers. The technology partner program portal will be a driving force in enabling this. The portal will help our technology partners capitalize on their investment in working with Hikvision, and to scale up their businesses in a very cost-effective way. We are very proud of launching our new portal and invite our technology partners to join.” Key features and benefits An ever-growing partner platform The portal will become a comprehensive partner database, and system integrators will be able to use the TPP portal to find the ideal partners for each project. The portal will feature a public listing of all technology partners and their locations, coupled with rich information about their solutions, making it the ideal platform for striking up new business relationships. Easy engagement with Hikvision integration support The TPP portal empowers technology partners to engage with the Hikvision integration department in a private and password-protected environment. Key modules within the portal include integration support, marketing events, integration project tracking and solution information management. Technical and commercial library The TPP portal is a comprehensive repository of technical documentation for system integration. This includes SDK documentation, software tools and agreements. This area of the portal is only visible to technology partners, and selected sections are visible to individual partners only. Hikvision Embedded Open Program (HEOP) management Technology partners that want to embed their technology into Hikvision cameras can manage the process here, including distribution-friendly license management.  

Read More

Video Compression and its Significance/3

Working with color Color images are typically represented using several ‘color planes.’ For example, an RGB color image contains a red color plane, a green color plane, and a blue color plane. When overlaid and mixed, the three planes make up the full color image. To compress a color image, the still image compression techniques described earlier can be applied to each color plane in turn. Imaging and video applications often use a color scheme in which the color planes do not correspond to specific colors; instead, one color plane contains luminance information (the overall brightness of each pixel in the color image), and two more color planes contain color (chrominance) information that when combined with luminance can be used to derive the specific levels of the red, green and blue components of each image pixel. Such a color scheme is convenient because the human eye is more sensitive to luminance than to color, so the chrominance planes can often be stored and/ or encoded at a lower image resolution than the luminance information. Specifically, video compression algorithms typically encode the chrominance planes with half the horizontal resolution and half the vertical resolution of the luminance plane. Thus, for every 16-pixel by 16-pixel region in the luminance plane, each chrominance plane contains one 8-pixel by 8-pixel block. In typical video compression algorithms, a ‘macro block’ is a 16×16 region in the video frame that contains four 8×8 luminance blocks and the two corresponding 8×8 chrominance blocks. Adding motion to the mix Video compression algorithms share many of the compression techniques used in still image compression. A key difference, however, is that video compression can take advantage of the similarities between successive video frames to achieve even better compression ratios. Using the techniques described earlier, still-image compression algorithms such as JPEG can achieve good image quality at a compression ratio of about 10:1. The most advanced still image codecs may achieve good image quality at compression ratios as high as 30:1. In contrast, video compression algorithms can provide good video quality at ratios of up to 200:1. This increased efficiency is accomplished with the addition of video specific compression techniques such as motion estimation and motion compensation. For each macro block in the current frame, motion estimation attempts to find a region in a previously encoded frame (called a ‘reference frame’) that is a close match. The spatial offset between the current block and selected block from the reference frame is called a ‘motion vector,’ as shown in figure 4. The encoder computes the pixel-by-pixel difference between the selected block from the reference frame and the current block, and transmits this ‘prediction error’ along with the motion vector. Most video compression standards allow motion-based prediction to be bypassed if the encoder fails to find a good match for the macro block. In this case, the macro block itself is encoded instead of the prediction error. Motion estimation predicts the contents of each macro block based on motion relative to a reference frame. The ref erence frame is searched to find the 16×16 block that matches the macro block; motion vectors are encoded, and the difference between predicted and actual macro block pixels is encoded in the current frame. Note that the reference frame isn’t always the previously displayed frame in the sequence of video frames. Video compression algorithms commonly encode frames in a different order from the order in which they are displayed. The encoder may skip several frames ahead and encode a future video frame, then skip backward and encode the next frame in the display sequence. This is done so that motion estimation can be performed backward in time, using the encoded future frame as a reference frame. Video compression algorithms also commonly allow the use of two reference frames – one previously displayed frame and one previously encoded future frame. Video compression algorithms periodically encode one video frame using still-image coding techniques only, without relying on previously encoded frames. These frames are called ‘intra frames’ or ‘I-frames.’ If a frame in the compressed bit stream is corrupted by errors, the video decoder can ‘restart’ at the next I-frame, which doesn’t require a reference frame for reconstruction. As shown in Figure 5, frames that are encoded using only a previously displayed reference frame are called ‘P-frames,’ and frames that are encoded using both future and previously displayed reference frames are called ‘B-frames.’ A typical sequence of frames is illustrated in Figure 5[d]. One factor that complicates motion estimation is that the displacement of an object from the reference frame to the current frame may be a non-integer number of pixels. For example, suppose that an object has moved 22.5 pixels to the right and 17.25 pixels upward. To handle such situations, modern video compression standards allow motion vectors to have non-integer values – motion vector resolutions of one-half or one-quarter of a pixel are common. To support searching for block matches at partial-pixel displacements, the encoder must use interpolation to estimate the reference frame’s pixel values at non-integer locations. The simplest and most thorough way to perform motion estimation is to evaluate every possible 16×16 region in the search area, and select the best match. Typically, a ‘sum of absolute differences’ (SAD) or ‘sum of squared differences’ (SSD) computation is used to determine how closely a candidate 16×16 region matches a macro block. The SAD or SSD is often computed for the luminance plane only, but can also include the chrominance planes. But this approach can be overly demanding on processors – exhaustively searching an area of 48×24 pixels requires over 8 billion arithmetic operations per second at QVGA (640×480) video resolution and a frame rate of 30 frames per second. Because of this high computational load, practical implementations of motion estimation do not use an exhaustive search. Instead, motion estimation algorithms use various methods to select a limited number of promising candidate motion vectors (roughly 10 to 100 vectors in most cases) and evaluate only 16×16 regions…

Read More