protecting information technology (it) and operational technology (ot) networks is crucial to safeguard the manufacturing industry as part of the secureamericas institutes (sai) nationwide initiative to empower the us manufacturing enterprise sai and partners at north carolina state university (nc state) and airgap inc are developing technology to resist attacks detect attacks in progress and ensure an it/ot system can automatically restore itself to a trusted state cyberattacks are one of the biggest threats to any organization and commonly target it networks (which share information data and resources between computers in an organization) the manufacturing industry is particularly vulnerable because its it networks are linked to operational technology networks that directly control machine functions and processes if an attacker corrupts the entire it/ot system it can lead to a complete business shutdown resulting in financial losses and ripple effects across the industry most of the manufacturing in the us happens in small and medium size firms making them an ideal target said rob gorham sais executive director the nc state teams effort to protect valuable manufacturing capabilities across it and ot is important in the secureamerica institutes journey to enable robust manufacturing supply chains manufacturing equipment is expensive and many smaller manufacturers have limited resources when it comes to technical expertise and budget said dr munindar singh alumni distinguished graduate professor in nc statess computer science department this means their networks are not always following the best practices needed to quickly isolate and mitigate potential threats singh and his partners abhi muthiyan architect of airgap inc and dr samudra vijay president and ceo of sam analytic solutions are collaborating on a two-fold automated approach for manufacturers to detect and resist cyberthreats a virtual honeypot (a security mechanism that creates a trap to lure bad actors) is created to deceive potential attackers paired with an appliance to isolate an ot network from its backup malware and ransomware can easily penetrate an entire system muthiyan said we are trying to prevent entire manufacturing plants from shutting down due to attacks and help them recover swiftly our isolation methods retain local backup copies which enable recovery in hours as compared to recovery in days for cloud backups backups should be immediately separated from the network to protect sensitive data in the event of a cyberattack vijay and his colleagues are developing a device to immediately cut off backups from the network and prevent attackers from accessing the entire system isolation of threats permits companies to continue operations while assessing the problem and decreasing severe impacts vijay said this technology can dramatically increase the resilience of small businesses and manufacturing entities the nc state team applies layers of detection and deception to it/ot networks including vulnerability detection file system monitoring and dynamic provisioning of honeypot resources for programmable logic controllers human-machine interface and supervisory control and data acquisition systems this intentionally compromised system will mimic a vulnerable manufacturing machine and trick the attacker once malicious intent is discovered the risk analyzer categorizes the threat and triggers alerts specific device isolation or entire network isolation we want to trap the attacker in the least disruptive way to an organization and convince them theyre getting something valuable when theyre not singh said most traditional approaches to cybersecurity assume the attacker is outside the walls that an organization or business is like a walled city and is safe in reality most attacks come from within this could happen through phishing attempts corrupted usb drives and more singh said thats why we need to isolate different parts of the walled city from one another if an attack only corrupts one small corner we can limit further harm and strengthen the industry