Page 13 - Cyber Warnings

learned physical model of the specific equipment (using the laws of physics governing the
dynamic system as a form of “natural encryption”).

But it’s not enough to know there’s a dissonance between physical reality and digital data. You
must know first and foremost, whether it’s due to an attack (as opposed to, say, sensor
malfunction). Next, you must be able to pinpoint the exact target of the attack.

Operators must know the specific valve, pipe, turbine or drill that's directly affected. Non-specific
alerts are of little use to operators since industrial plants and factories cannot afford to be taken
offline due to ambiguous threats or false alarms.

Conclusion

True state awareness is critical to maintaining operational resilience and preventing physical
damage. That is why data forgery, when used by malicious actors to rob operators of visibility
into their own plants and equipment, is a growing threat and should be proactively addressed in
order to prevent severe damage.

About the Author
Michael Shalyt, VP Product, Aperio Systems (www.aperio-
systems.com)

Michael Shalyt leads the APERIO Systems research and product
development team. Prior to joining APERIO, Michael led the malware
research team at the renowned cybersecurity firm Check Point,
following four years as a leading researcher and team leader in an elite IDF intelligence unit.

Michael is a graduate of the elite “Psagot” IDF academic program and holds a dual Bachelor’s
degree in Physics and Electrical Engineering from the Technion, in addition to a Master’s
degree in quantum control and quantum information, also from the Technion.

He has been recognized with numerous awards, including several Technion Presidential
Excellence Awards, and a bronze medal for the Israeli team in the 36 International Physics
th
Olympiad in Salamanca, Spain.

13 Cyber Warnings E-Magazine November 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide