A cyber-physical security ecosystem
for industrial enterprises

IT-OT Convergence

Kaspersky
ОТ CyberSecurity

IT-OT Convergence
Kaspersky
Kaspersky
Extended Detection
ExtendedDetection
and Response
and ResponseTechnologies

Technologies
A robust selection of tested,compliant, and approved industrial
security solutions

Knowledge
Reliable threat analytics andcomprehensive industrial
cybersecurity training

Expertise

Kaspersky
Antidrone

Kaspersky
loT Secure
Gateway

Kaspersky
Industrial
CyberSecurity
KICS XDRKICS XDR

Kaspersky
Machine Learning forAnomaly Detection
Kaspersky
SD-WAN

Kaspersky
Secure Remote
Workspacefor Nodes

Endpoint protection,detection andresponse

for Networks
Network traffic
analisis, detection
and response

Kaspersky
Automotive
Secure Gateway

Expertise

Knowledge

A full range of professional
services for comprehensive
industrial cybersecurity
Kaspersky
Security
Awareness

Kaspersky
ICS ThreatIntelligence

Kaspersky
ICS CERT
ExpertTrainings

Kaspersky
ICS Security
Assessment

Kaspersky
Incident
Response

Kaspersky
ManagedDetection
and Response

IT-OT Convergence

Kaspersky
ОТ CyberSecurity

Kaspersky
IoT Secure
Gateway

Kaspersky
Extended Detection
and Response

Kaspersky
SD-WAN
Kaspersky
Industrial
CyberSecurity
KICS XDR

for Nodes
Endpoint protection,detection andresponse

IT-OT Convergence

for Networks
Network traffic
analisis, detection
and response

IT-OT Converge

Kaspersky
Extended Detection
and Response

Kaspersky
Extended Deand Respons

Technologies
Kaspersky
Machine Learning
for Anomaly
Detection

Kaspersky
Antidrone

Technologies

Kaspersky
Industrial
CyberSecurity
KICS XDR

Kaspersky
Secure Remote
Workspace

Kaspersky
loT Secure
Gateway

Kaspersky
Antidrone

Kaspersky
Secure Remote
Workspace

Kaspersky
Machine Learning for
Anomaly Detection

Kaspersky
Automotive
Secure Gateway

Kaspersky
SD-WAN

Kaspersky
Industrial
CyberSecurity
KICS XDRKICS XDRKICS XDR

Kaspersky
Machine Learning for
Anomaly Detection
Kaspersky
SD-WAN

for Nodes

Endpoint protection,detection andresponse

for Networks
Network traffic
analisis, detection
and response

Expertise

Knowledge

for Nodes

Endpoint protection,
detection andresponse

for

Neana
an

Knowledge

Kaspersky
Antidrone

Kaspersky
Security
Awareness
Kaspersky
Automotive
SecureGateway

Kaspersky
ICS ThreatIntelligence

Kaspersky
ICS CERT
ExpertTrainings

Kaspersky
ICS Security
Assessment

Kaspersky
Incident
Response

Kaspersky
ManagedDetection
and Response

Kaspersky
Security
Awareness

Kaspersky
ICS ThreatIntelligenceKaspersky
ICS CERT
ExpertTrainings

KICA

Visit website

Kaspersky
Industrial
CyberSecurity

XDR
Kaspersky
Industrial CyberSecurity
for Nodes

Kaspersky
Industrial
CyberSecurity

Kaspersky
Industrial CyberSecurity
for Networks

TECHNOLOGY
ServerServerWorkstation

SensorPortable
Scanner

Reveals hidden threats, anomalies, vulnerabilities,
and intrusion attempts long before they become
dangerous to your operations

Host Isolation

EDR — enhanced
endpoint protection

Execution Prevention

Quarantine

Protects industrial devices
from cyberthreats

Certified by automation vendors and regulators
No adverse effect on technological processes.
Prevents unacceptable damage
Facilitates the management of complex, distributed
automation infrastructure and incident response

Protection
StatusSecurity
Audit

NetworkCommunications

HostTelemetry

Equipment
Monitoring

Incidents

Helps mitigate risks and maintain a record of violations

End-to-end coverage for Industrial
Automation and Control Systems (IACS).
Protection for Linux, Windows, isolated or
third-party computers, as well as detectionof network anomalies and threats.

Buy from a partner

Request a demo

Datasheet

Active and/or passive security
audit of endpoints and networks.
Centralized risk, security
policy and asset management
at all levels of IACS.

Outstanding systems and network visibility.
Investigation and reconstruction of theentire killchain. Visualization of incident
progression across industrial networks anddifferent nodes.

ics.kaspersky.com

Open Single
Management
Platform

Visit website

Kaspersky
Extended Detection
and Response

Kaspersky
products

Endpoints

Casemanagement
Kaspersky
Anti Targeted Attack

Automation& orchestration(playbooks)

TECHNOLOGY

dataresponse

Investigation

ServersNetwork

Kaspersky
Endpoint Detection
and Response
Applications

Kaspersky
Endpoint Security

Deployment
toolkitThrough close integration with Kaspersky Extended
Detection & Response, the Kaspersky Industrial
CyberSecurity platform enables new scenarios that include
interactions with third-party solutions, with enhanced
investigative and response capabilities. The platform
also helps protect your business not just in industrial
environments, but also where industrial and corporate
environments overlap. This is achieved thanks to close
concert with Kaspersky’s best-in-class IT cybersecurity
portfolio.

3rd party products
Threat detection
and crosscorrelation

Virtualmachines

OthersAssetmanagement
enrichment

Kaspersky
Threat Intelligence

response

Kaspersky
Security Awareness

Dashboards& reporting

Log management& data lake

Open APIIn this way, security teams can form a holistic pictureof an incident’s development and identify its root causes
to prevent similar incidents in the future.

OS3rd party
connectors

data

Kaspersky
Industrial
CyberSecurity

response

Response examples with KICS:

Contact us

Datasheet

AV scan and AV databases update
Launching tasks

Change node authorization
Node and process isolation

Visit website

Kaspersky
Machine learning
for Anomaly Detection
TECHNOLOGY

Detects equipment faults and human error long before they
become critical, helping to prevent failure and accidents
Identifies atypical employee actions or equipment
operations as signs of a specialized attack or sabotage
Combines anomaly detection with predictive analysis
of equipment condition and life cycle

Integration with KICS for Networks
and KUMA: receives telemetry
and events from these systems
and sends back alerts about
detected anomalies

Contact us

Case studies

Implementation process

Applies diagnostic rules
to the predefined symptomsof the problem, and machinelearning to detect any deviationsfrom normal equipment behavior

Uses AI to analyze
process telemetry
and events related
to employee actions

mlad.kaspersky.com

Visit website

Kaspersky
SD-WANTECHNOLOGY

Easy
scalability

Convenientmanagement

Cost
optimization

Centralizedsecurity

Kaspersky SD-WAN allows enterprises to build a fault-tolerant, geographically
distributed network with centralized management, while ensuring the continuityof production processes. The Kaspersky SD-WAN architecture allows you toeasily integrate Kaspersky and third-party security tools through Virtual Network
Functions (VNFs) manager.
Using the SD-WAN infrastructure with Kaspersky ICS for Networks, you
can organize a centralized monitoring and protection system for numerous
distributed industrial sites.

Contact us

Visit website

Kaspersky
Antidrone
TECHNOLOGY

Drone detection and tracking
Drone classification using neural networks
Directional and omni-directional jamming

Kaspersky Antidrone reduces the likelihood of process stoppages
at industrial enterprises by preventing unauthorized drones fromentering their territory. The system automatically scans the airspace,detecting and classifying drones. Information about what’s happening
is displayed in the web interface. In the event of a threat, and with theappropriate permissions, the operator can neutralize the drone.
The Kaspersky Antidrone solution is modular and can be applied
to industrial sites of any size. The solution also supports the“friend‑or‑foe” mode of operation, allowing customers to use theirown drones and avoid intervention by illicit, unmanned air vehicles.

Request a demo

Datasheetantidrone.kaspersky.com

Visit website

Kaspersky
IoT Secure
Gateway
TECHNOLOGY

Secure data collection and transport from IoT devices
to digital and cloud platforms
Kaspersky Cyber Immunity based on KasperskyOS provides
the «innate» resistance to the vast majority of types ofcyberattacks without additional security tools
Infrastructure transparency, centralized event management,and production optimization

The technical and commercial development of this solutionis handled by Adaptive Production Technologies LLC(Aprotech, a subsidiary of Kaspersky)
Contact us

Request a demo

Datasheet

The solution consists of Kaspersky IoT Secure Gateways basedon KasperskyOS, and the Kaspersky Security Center (KSC)
management console. The gateways securely collect andtransfer data from equipment to digital and cloud platforms,delivering high-quality business intelligence to optimize
production and prevent incidents. The console enables mappingof events from different sources and managing of up to 100,000
physical, virtual and cloud workstations.

Visit website

Kaspersky
Secure RemoteWorkspace
TECHNOLOGY

Risk

Users’ workstations are among the mostcommon targets for cyberattacks

Solution

Kaspersky Secure Remote Workspace(KSRW) is a solution for building a managed
and functional infrastructure of thin clients
based on Kaspersky’s own microkernel
KasperskyOS operating system

Cyber Immune Thin Clients as part of Kaspersky SecureRemote Workspace provide a secure connection
to virtual desktops, including a trusted zone for connecting
users to the industrial infrastructure.

Solution Overview

Request a demo

DatasheetVisit website

Kaspersky
Automotive
Secure Gateway
Updateserver(OTA)

Security
monitoring
centerRemotediagnostics

TECHNOLOGY

Cloud OEM Infrastructure
Unauthorized access
ECU targeted attacks
Attacks via vehicle infotainment systems (IVI)
Malicious diagnostics
Compromise of update system
Uncontrolled connections and data flows, communication disruptionIVI
OTA Agent
ECU 1
ECU 2SecureGateway

VSOC AgentRVD AgentECU N

Kaspersky
Automotive
Secure Gateway
Secure-by-design solution
Helps comply with cybersecurity regulations
4-in-1: Connected gateway, security gateway,
OTA-master and VSOC agent
Compliance with ISO21434, ISO26262,
AUTOSAR Adaptive, Uptane

Contact us

DatasheetVisit website

Kaspersky
ICS ThreatIntelligence

Stay ahead of youradversaries with in‑depth
visibility into cyberthreatstargeting your organization

KNOWLEDGE

Deep understanding of industrial cybersecurity
threats and vulnerabilities for efficient risk
assessment, successful attack detection, incident
investigation, and response.

Kaspersky
ICS Threat
Data Feeds

A set of regularly updated threat
intelligence data feeds tailored to thespecific needs of industrial cybersecurity

Backed by the unparalleled expertise andexperience of Kaspersky ICS CERT, the first private
CERT in industrial cybersecurity.

Kaspersky ICS
Threat Intelligence
Reporting
Fast threat detection and extensive analyticalcapabilities
Increases the effectiveness of investigations
and active threat searches
Comprehensive threat and vulnerability
information for informed decision-making

Kaspersky
Ask theAnalyst
A service forcustomers to request
expert guidance andinsights into specificthreats they’re facingor are interested in.

Request a demo

Solution overview

Contact us

Provides greaterawareness of malicious
campaigns targeting
industrial organizations
as well as information onvulnerabilities found in themost popular industrial
control systems

Visit website

Kaspersky Threat Data Feed service delivers real-time threat intelligence
information to help industrial organizations to protect their networks andsystems from cyberthreats. The data feeds include information on known
malware, phishing websites, latest vulnerabilities and exploits, and other typesof cyberthreats. Set in context, the data can more readily reveal the ‘bigger
picture’ and be used to answer the ‘who, what, where, when’ questions toidentify your adversaries, make quick decisions and take action.

Kaspersky
ICS Threat DataFeeds
KNOWLEDGE

Kaspersky ICS
Hashes Data Feed

Kaspersky ICS
Vulnerability Data FeedICS Vulnerability Data
Feed in OVAL format

Up-to-date threat intelligence forICS and other systems used in OT
to simplify and automate timely attackdetection and investigation

Verified and refined data on vulnerabilities
discovered in software and hardware ofICS systems and other systems used
in industrial environments, provided in amachine‑readable format

A regularly updated feed containing
OVAL definitions for automateddetection of known vulnerabilities
in SCADA systems and otherindustrial software#prevention#prevention#detection#detection#detection#investigation#investigation

Contact us

More about the service

Visit website

Kaspersky ICS
Threat Intelligence
Reporting
KNOWLEDGE

Reports are delivered via Kaspersky Threat Intelligence Portal
or can be accessible by API.

APT reports

The threat landscape

Vulnerabilities foundVulnerability analysis and mitigation

Reports on new APT and high volume attack
campaigns targeting industrial organizations,and updates on active threats.

Reports on vulnerabilities identified by Kaspersky
in the most popular products used in industrialcontrol systems, the industrial internet of things,
and infrastructures in various industries.

Contact us

Kaspersky ICS Threat Intelligence Reporting provides in-depth intelligenceand greater awareness of malicious campaigns targeting industrialorganizations, as well as information on vulnerabilities found in the mostpopular industrial control systems and underlying technologies. Detailed
information tailored for industrial organizations helps customers tosafeguard critical assets, including software and hardware components
and ensure the safety and continuity of technological process.

More about service

Reports on significant changes to the threat
landscape for industrial control systems, newly
discovered critical factors affecting ICS security
levels and ICS exposure to threats, including
regional, country and industry-specific information.

Our advisories provide actionable
recommendations from Kaspersky experts to help
identify and mitigate threats.

Visit website

Kaspersky
Ask the Analyst
KNOWLEDGE

Inquiries related to the ICS*

Kaspersky Ask The Analyst complements our Kaspersky Threat Intelligenceportfolio. With this service, you can contact experts for support and useful
information on specific threats and vulnerabilities that you face or are interested
in. Using this data, you can improve your defenses against threats that target
both your organization as a whole and your industrial infrastructure.

* Additional information aboutpublished reports:

Access to leading
threat intelligenceexperts, including
industrial security
experts fromKaspersky ICS CERT

Personalized anddetailed contextual
informationfor effective
investigations• Information on ICS vulnerabilities• Process control system threat statistics
and new trends by region and industry• Analysis of malware targeting the ICS• Information regarding regulatory
requirements and standards

Contact us

More about the service

Detailed instructions
from our experts
on how to respondquickly to threats
and vulnerabilities

Visit website

Visit website

Kaspersky
Security AwarenessKaspersky
ICS CERT
Expert Trainings

KNOWLEDGEKNOWLEDGE

Training materials that arm your employees with the necessaryknowledge about the most important aspects of industrial cybersecurity,
increasing the level of awareness at all levels of the organization
Kaspersky Interactive Protection Simulation — game-based training throughbusiness simulations featuring a multitude of scenarios across different
industries: Thermal Power, Hydroelectric Power, Oil & Gas, Petrochemical,
Petroleum holdings, etc.
The Kaspersky Automated Security Awareness Platform (ASAP) —interactive learning modules and simulated phishing attacks designed
to foster cybersafe behavior

Our ICS training program has been
specially designed to ensurethat information technology(IT), operations technology(OT), and information security (IS)professionals, as well as managers andother employees, can expand theirknowledge of industrial cybersecurity
and gain specialized hands-on skills.

Digital forensics and incident response
EmailPC Security

Websites andthe internet

Mobile devices
Confidential data

Passwords
and accounts

Bank card security
and PCI DSSSocial media
and messengers

Exploring vulnerabilities in OT/IoT devices and industrial software
Cross-functional training programs for IT, OT, and IS experts

GDPR

Industrial
cybersecurity

Contact us

Try Now

Training Catalogue

Contact us

Training Catalogue

Visit website

Kaspersky
ICS SecurityAssessment
EXPERTISE

A comprehensive approach to identifying security vulnerabilities
and weaknesses in industrial infrastructures, including:Attack surface
The security level of the industrial network infrastructure,
DCS, and industrial devices
Risks of critical systems compromise

Network traffic, including industrial protocols
Process control components: SCADA, PLC, smart meters, etc.
Physical elements of the automated process control system
Network architecture, including ACS networks

More about the service

Contact us

Visit websiteKaspersky
Managed Detection
and Response
EXPERTISE

Telemetrycollection &processing

Proactive threat detection: patented attack indicators
help track undetected threats within the control system
Automated and guided response (with complete forensic
investigation and malware analysis available on-demand)
ICS cybersecurity expertise: backed by one of theindustry’s most successful and experienced proactive
threat detection teams

Triage,correlationand enrichment

Continuous hunting, detection, and elimination of threatstargeting your industrial enterprise
Reduced security costs by eliminating the need to hire newcybersecurity experts
All the key benefits of a SOC, without having to establish
one in-house
25% of our protected customers are from the Industrial sector
See the MDR report to find out more
Contact us

More about the service

Visit website

Kaspersky
Incident Response
EXPERTISE

Risk
Solution

One vulnerability is enough for cybercriminals to gain
control of entire industrial systems• Rapid elimination of the consequences of an incident
by Kaspersky’s Global Emergency Response Team• Analysis of the causes, sources, and consequencesof the incident• Detailed view of the malware used
• Additional support by Kaspersky ICS-CERT

Incident response:
Investigationand eliminationof threats

Order the IR Handbook
at Kaspersky ICS-CERT

Digital forensics:
Analysis of digital
evidence

Learn more

Malware analysis:
Get a detailed viewof the files usedin an attack

Contact us

Discover IR trends in Kaspersky Global Emergency
Response Team (GERT)’ research.

26 years of world-classexperience and petabytesof threat data
ICS CERT — own international
OT / IoT security researchdivision
Proven expertise in the IT/OTsecurity industry with numerousawards and achievements
More than 100 certificatesof interoperability withautomation vendors’ solutions
Proven technology effectiveness,compliance with standards
and requirements

More about
OT ecosystem

More about
IT ecosystem

Contact us