The OT Cybersecurity Dilemma: Selecting your new vault door

When selecting a security solution for your OT network, defining your objective from the outset is crucial. This strategic approach empowers you to choose the most effective solution tailored to your network's unique needs rather than adopting a one-size-fits-all approach. As the adage goes, if you only have a hammer, everything starts to resemble a nail. This simplistic approach is a pitfall to be avoided at all costs in cybersecurity. The complexity of this issue is underscored by the frequent news stories about OT network breaches and the mounting repercussions of these attacks on the communities they serve.

Imagine you're building a state-of-the-art vault to safeguard your most prized possessions. You have three access control options. Which of the three would you choose?

‍

1. Bars

‍

2. Key Code

‍

3. Biometric Scanner 

‍

“Of course, I would take the last one” is the likely response of a rational person looking to protect their valuables. But then you might ask, “How much will it cost?”

“What if I told you that the last one is the cheapest to buy and easiest to maintain?”

 “Well,” you might say, “That makes this a very easy selection; I’ll take the last one, the most secure and cost-effective one.”

“I should tell you that most people choose one of the first two; they have been the standard for protecting valuables for years. They might be more expensive, but no one ever got fired for buying them.”

“Did their valuables get stolen?” 

“Well, yes, but no one blames the person that bought the doors.”

“So let me get this straight. Door #1 literally has holes that you can see through and maybe even squeeze through, and can be opened easily from the inside. Door #2 has a code anyone can steal, spy on, and then use. Door #3 can only be accessed by unique biometrics and the presence of a specific unique digital key provisioned on your mobile device.”

“That is correct.”

‍

Let’s consider this from an OT cybersecurity perspective. 

Door #1 is a firewall. It has intentional holes that most traffic can squeeze through (SSL), and traffic can be initiated from inside with few real restrictions. People often put multiple of the same doors and convince themselves that layering these bars makes it harder to get through all of them.

Door #2 is a VPN, where credentials are stolen through phishing and malware. Once you enter the door, you can do whatever you want inside the building. 

Door # 3 is BlastWave. You can’t see through the vault door and can only get in with biometrics and a specific mobile device. Once in the vault, you can only get into the safe deposit boxes to which you were given the key and can’t even see what is in the rest. 

And yes, deploying is easier and more cost-effective than firewalls or traditional VPNs. Let us prove it to you with a demo and a trial.