VPK productionlines underKaspersky
protection

About the company
The private food production company Voznesensky Pischevoy Kombinat LLC (VPK, the Customer) wasfounded in 1996. The company's main line is the production and sale of confectionery, specializing in dairy
sweets, jelly marmalade, mini caramels, and halva.
VPK's produce is certified in accordance with international food quality and safety standards andcertificates. The most important task of the enterprise is to ensure high-quality products. For this reason,VPK introduced a quality control system and installed all the necessary equipment to monitor the qualityof products and incoming raw materials and to conduct related research.

MissionFood industry• Founded in 1996
• Moscow Region, Russia• Total annual production > 14,000 tons
per year“ It is important to notethat industrial
cybersecurity in Russia
is relevant not only forcritical infrastructures,
but also for lightindustry and the foodsector, which have ahigh level ofautomation. This
project perfectly
demonstrates that themarket is maturing andthere is a desire forsecure, high-qualityproduction.”
Alexey Petukhov,
KICS Business Development
Manager, Kaspersky

VPK collaborates with reliable suppliers of industrial solutions for the foodsector, including Siemens and B&R. Cybersecurity is front of mind forboth the company founders and the IT team. Task prioritization led to theimplementation of a commercial project to secure the business contours
using Kaspersky solutions in early 2019.
The use of multivendor solutions in the industrial control system (ICS)
environment, combined with organic growth in operational capacity, which
involves the expansion of technological equipment and new connections,
impose special requirements in terms of industrial cybersecurity to ensuresustainable business development. With a view to expanding the VPK
production line, an agreement was reached to pilot the full-fledged solution
Kaspersky Industrial CyberSecurity (KICS) in a real limited segment of thetechnological process.
The project covered the protection of VPK's key assets against various
types of mass cyber attacks (ransomware, viruses, and exploits targetingold versions of operating systems; vulnerabilities in controllers), as well as
resource access control for company engineers and specialists who start(sometimes remotely), configure, and operate industrial equipment.
One of the tasks of the pilot project was to determine the ICS segment
for KICS deployment. This entailed selecting the most typical elements formonitoring and minimizing the work involved in deploying and configuring
the solution. Collaboration between the Customer's IT team and experts
from business partner Adaptive Production Technology (APROTECH) at thepreparatory stage made it possible to engineer and deploy the solution in
two days.
One of the additional requirements on the part of the Customer was theneed for a simple and intuitive interface for detecting and interpreting
events of interest in the context of industrial cybersecurity. Therefore, thepilot included skills transfer sessions on how to “teach” the main solution
component the rules for creating whitelists of allowed elements and events.

Solution
Kaspersky Industrial CyberSecurity
does not affect the continuity of thecompany's technological processes.

The initial stage of the project involved architecting and selecting the pilot
segment. By agreement with the Customer, this architecture touched upon
the main operational domains (production, packaging, storage). The numberand composition of KICS components were selected in accordance with theICS elements in use at the level of SCADA systems, controllers, and auxiliary
software solutions.

Control and monitoring

KICS for Nodes provides cybersecurity for servers and workstations at theICS level, while consuming fewer system resources and supporting the ability
to install and update without a restart. The product is certified with themost common software and hardware components of industrial automation
systems.

Non-Intrusive solution

Kaspersky Industrial CyberSecurity
provides application launch policy andaccess to removable devices, as well as
provides passive monitoring of network
traffic of the automated control system.

Compliance
The implementation of a comprehensivesolution for industrial cyber protection
helps ensure compliance with regulatory
requirements in the field of information
security of industrial enterprises.

KICS for Networks is designed to monitor and protect industrial networks.
The product does not interfere with production processes, since traffic
is analyzed in passive mode. The extensive network integrity control andintrusion detection systems give the operator advance warning of deviationsin production processes.

“ During the project, wesaw in practice thatcybersecurity issues,
among other new typesof risk, are a strong
focus of VPK's owners.
Even new scenarios forusing industrial data areassessed in terms ofbusiness value,security, and cost.”
Andrey Suvorov,CEO, APROTECH

Results
The integrated industrial cybersecurity approach adopted by the joint team ofKaspersky and APROTECH met all the expectations of VPK and nullified any
risk of the deployment process having an impact on production. The project
results demonstrated the effectiveness of the system at detecting incidents
and reducing unscheduled downtime.
Currently, the system is functioning in pilot mode. It provides training in the newrules for using allowed elements and events, and full monitoring of industrial
traffic and events at the level of operator computers. The decision to put thesystem into commercial operation will be based on the results of this work.
“Cooperation with colleagues from Kaspersky and APROTEH allowed us not
only to prioritize company assets to enhance their cyber resistance, but toframe our initial plans for using trusted industrial data to increase production,”
said Dmitry Goldobin, CEO, VPK.

Kaspersky Industrial CyberSecurity is a portfolio of technologies and services designed tosecure operational technology layers and elements of your organization – including SCADA
servers, HMIs, engineering workstations, PLCs, network connections and even engineers –without impacting on operational continuity and the consistency of industrial process.
Learn more at www.kaspersky.com/ics

Kaspersky ICS CERT:
https://ics-cert.kaspersky.com/
Cyber Threats News: www.securelist.com#Kaspersky#BringontheFuturewww.kaspersky.com
2020 AO Kaspersky Lab. All rights reserved.
Registered trademarks and service marks are the propertyof their respective owners.

****W orld Leading
Internet Scientificand TechnologicalAchievement
Award at the 3rdWorld InternetConference** China
International
Industry Fair (CIIF)2016 special prize