Kaspersky unveils new data feed for industrial vulnerabilities detection
Kaspersky launched a new machine-readable Open Vulnerability and Assessment Language (OVAL) data feed for the automated detection of vulnerabilities in operational technology (OT) software. Kaspersky Industrial OVAL Data Feed for Windows delivers comprehensive intelligence about vulnerabilities in most popular SCADA and distributed control systems (DCS) based on data from multiple sources, analyzed and updated by Kaspersky experts, as well as instructions for mitigation. The feed is delivered in XML format for integration with vulnerability management solutions which support the OVAL standard.
The number of vulnerabilities discovered in industrial automation software is substantial and raises concern. For example, National Vulnerability Database (NVD, https://nvd.nist.gov/) contains thousands of known vulnerabilities in popular software used in automation, manufacturing execution and distributed control systems, and many more recordings of known vulnerabilities in various industrial software solutions.
Kaspersky Industrial OVAL Data Feed for Windows applies OVAL specifications dedicated to the standardized transfer of vulnerability information across various security tools and services. It helps industrial organizations enhance vulnerability detection and assessment of SCADA and other OT software.
The product is integrated into a customer’s industrial vulnerability management solution and can be used with open-source OVAL interpreters. It provides detailed information about detected flaws: their description, affected software name and versions, severity score and metrics (CVSS), and it also recommends measures for mitigation. The feed covers products from the world’s leading vendors such as Siemens, Schneider Electric, Yokogawa, Emerson and more to come according to the needs of Kaspersky clients.
Kaspersky ICS CERT experts collect data and build their intelligence about vulnerabilities through continuous monitoring of third-party sources, such as MITRE, National vulnerability database (NVD), US-CERT, vendors and communities, but also conducting its own research. The team carefully analyses all the data and tests it against possible errors that may affect correct detection and assessment. The mitigation measures they provide for vulnerabilities are based on their extensive experience in OT threat protection and SCADA vendor’s recommendations.
“OVAL standard is actively used to describe vulnerabilities or proper system configurations for known software. However, the market lacks a comprehensive and high-quality OVAL data source for the software used in industrial control systems. Our new feed fills this gap and provides sufficient coverage for ICS-related software. It will help industrial organizations enhance the automated process of vulnerability assessment while raising its effectiveness. And we are happy to prove it during projects with our customers,” comments Mikhail Berezin, Head of ICS CERT Products at Kaspersky.
To get more information about Kaspersky Industrial OVAL Data Feed for Windows and submit request for a piloting please contact Kaspersky via this email: ics-cert@kaspersky.com
About Kaspersky
Kaspersky is a global cybersecurity and digital privacy company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 240,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.
Kaspersky unveils new data feed for industrial vulnerabilities detection
Kaspersky
Related Articles Product news
Laser-focus on business: Kaspersky transforms the United partner program
Kaspersky has introduced a major update to its United partner program. As the number of its global partners increases, Kaspersky has defined four new specified approaches for those selling, deploying, providing managed services or building solutions with Kaspersky products. To drive this new approach, the partner program, benefits, and motivation have been revised to better align with its partners’ business models.Read More >Updated Antidrone solution from Kaspersky: smarter detection, scaling and customization
Amid a constantly growing civilian drone market, Kaspersky has given its anti-drone solution a major new update. The latest version features improved system scalability, an interface that operates 12 times more quickly, and optimized incident visualization. Kaspersky Antidrone Solution is a comprehensive system that detects, identifies, and neutralizes civil drones that pose a security or physical threat to various settings, including critical infrastructure, public events, and commercial facilities.Read More >Kaspersky products score maximum points in SE Labs endpoint security tests
Amid the current prevalence of malware attacks, Kaspersky’s anti-malware tools have achieved the highest possible rating in examination by independent security testing company SE Labs. Kaspersky Endpoint Security for Business, Kaspersky Small Office Security and Kaspersky Plus were subjected to a mixture of targeted attacks using well-established techniques and threats found live on the internet at the time of the test. All three products were awarded the maximum possible 1136 points and an “AAA” awards certificate.Read More >
We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.