THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Enterprise Security Magazine
Nozomi Networks
The Secure Partnership for OT
Andrea Carcano, Co-founder and Chief Product OfficerNozomi Networks Inc. is a leader in real-time cybersecurity and operational visibility for industrial control systems (ICS). Fortinet and Nozomi Networks have collaborated to provide ICS environments with a holistic and comprehensive security platform. Working with Fortinet, Nozomi Networks extends the reach of Fortinet’s Security Fabric by providing detailed threat intelligence and visibility of ICS devices, networks and protocols. This synergetic relationship between Fortinet and the Nozomi Networks solution is effectively and seamlessly bridging the IT/OT security gap for customers around the world.
Adding Value with the Nozomi Network Solution
Nozomi Networks SCADAguardian’s non-intrusive ICS protocol monitoring capabilities profile the behavior of industrial devices and networks using artificial intelligence (A.I.) techniques to detect anomalies in the ICS network in real-time. By developing an operational baseline, SCADAguardian is able to rapidly identify cyber and operational anomalies and provide incident alerts in various ways. When integrated into Fortinet’s Security Fabric, FortiGate and FortiSIEM for example, Nozomi Networks and Fortinet work in tandem to not only identfy cyberthreats, but to implement policies that remediate them.
Designed to minimize system downtime and limit data loss, the Fortinet-Nozomi Networks solution optimizes productivity and business continuity in industries reliant on ICS networks. By deploying a Nozomi Networks SCADAguardian appliance within the OT networks, Fortinet and Nozomi Networks solutions join forces to passively monitor all network traffic communications and create a detailed map of the network, its nodes, and the behavior of each device in the network.If an anomaly or suspicious behavior is detected, an alarm is generated and sent to security operators and network administrators. At the same time, SCADAguardian is capable of automatically modifying the right policy in FortiGate to block the suspicious traffic.
The Most Comprehensive Security Solution Available
As industrial networks begin to connect and automate their systems, they need to be weary of adopting standard IP networking doctrines that favor open network segmentation between workgroups and applications. A lack of segmentation between OT applications and IT control will, expose ICS networks to a higher degree of risk that might outweigh gains in process efficiency and centralized control. If malware is able to enter the ICS domain, it often goes undetected and can move at will. Additionally, traditional IT-based attacks, such as DDoS, are now able to move beyond IT and attack operational networks.
IT networks address these issues by deploying protective cybersecurity measures like firewalls to segment their internal networks and mitigate the damage and limit data exposure. However, in the case of critical infrastructure and ICS, protective measures to cybersecurity cannot be the last and only line of defense. ICS require both protective and threat intelligence appraches so that cybersecurity security stakeholders can engage in proactive, reactive, and preseciptive cybersecurity practices against ICS cyber threats.
Nozomi Networks and Fortinet work in tandem to not only identfy cyberthreats, but to implement policies that remediate them
With the FortiGate/SCADAguardian solution, cybersecurity stakeholders can view deeper into the ICS networks than ever before, identifying and thwarting cyberthreats as they materialize in their infancy. Additionally, the FortiGate/ SCADAguardian solution is meant to scale for enterprise-grade deployments, providing granularity of detail with mult-tenant oversight.
Thanks to the Security Fabric, SCADAguardian can leverage an uparrelleled tight integration with Fortinet’s extensive portfolio to bridge the gap between IT and OT domains. For facilities like manufacturing plants that have numerous end devices and require real time information, a FortiHypervisor could be incorporated with the FortiSIEM and SCADAguardian to meet this real-time information requirement. In short, the active integration between SCADAguardian and Fortinet Security Fabric products provide ICS networks with the most comprehensive security solution available and enables optimum efficiency within, and beyond, the Industrial network.
Looking at The Future
Increased connectivity and the digitalization of ICS and OT have introduced new cyber threats that must be addressed. The good news is solutions are available to answer the need for better security, reliability and safety. Nozomi Networks is the leader of industrial cybersecurity, delivering real-time visibility to manage cyber risk and improve industrial operations resiliency. Customers gain advanced cybersecurity, improved operational reliability and easy IT/OT integration.
Nozomi Networks News
Nozomi Networks Helps Facilitate Security for Gerdau's Industrial Environment
Nozomi Networks Raises $100 Million in Series E
Cybersecurity company Nozomi Networks has secured $100 million in a Series E funding round, making it the latest company focusing on industrial technology to successfully raise significant investment in recent months.
Nozomi,l which brought its first product to market in November 2013, develops technology designed to secure the internet-connected devices and systems used to support the day-to-day running of critical infrastructure such as power grids, oil and gas facilities, manufacturing plants and water utilities.
These systems, known collectively as operational technology, have typically been managed separately from information-technology networks, which comprise software such as email, human resources, sales and accounting platforms. That has changed, said Edgard Capdevielle, president and chief executive of Nozomi, as companies have digitized their work environments in recent years and the threats to these systems have grown.
“Folks are realizing that as these networks move to the purview of the chief information security officer, which is a trend that is happening aggressively after Colonial Pipeline, they need to be protected,” he said, referring to a ransomware attack on the U.S. pipeline operator in 2021, which forced the closure of the largest fuel artery on the East Coast for six days and prompted significant government action on cybersecurity.
Manufacturers Mitsubishi Electric and Schneider Electric participated in the round. Previous investors in Nozomi, which has raised around $250 million to date, include manufacturing companies Honeywell , Johnson Controls and Keysight Technologies, as well as the venture arm of the U.S. Central Intelligence Agency, In-Q-Tel.
Capdevielle said the funding will be used for product development and expanding the company’s global sales reach. During its Series D round in 2021, the company had described the funding as pre-IPO, and Capdevielle said that is still an ambition for the company, albeit secondary to growth.
“I think after this round, we would have the optionality of IPO. But we don’t see [an] IPO as an end goal, we see it as a milestone and as yet another option for the company to source money. But our ultimate goal is category domination,” he said.
Nozomi is the latest operational-technology specialist to secure significant funding over the past year. In September, industrial cybersecurity company Dragos completed a $74 million Series D extension round, and last week, cyber defense company Claroty raised $100 million in strategic financing.
Industrial cybersecurity has become a hot-button topic since Colonial’s attack, but warnings from the U.S. government and its allies about threats to critical infrastructure have escalated of late. Senior law enforcement and intelligence officials, including the director of the Federal Bureau of Investigation, Christopher Wray, have said that attempts to break into networks by nation-states such as China are at a record high. Beijing has consistently denied involvement in cyberattacks.
Ransomware groups, which have gone after softer targets in IT networks historically, are also intensifying their strikes against industrial control systems, programmable logic controllers and other platforms that govern the day-to-day operations of heavy machinery used in vital industries, such as wastewater management.
“We think this trend towards not just connected devices but cyber-physical systems is creating more of a challenge than any of us are comfortable with,” said Scott Westlake, vice president of strategic innovation at Keysight, which is both an investor in and a customer of Nozomi.
Nozomi,l which brought its first product to market in November 2013, develops technology designed to secure the internet-connected devices and systems used to support the day-to-day running of critical infrastructure such as power grids, oil and gas facilities, manufacturing plants and water utilities.
These systems, known collectively as operational technology, have typically been managed separately from information-technology networks, which comprise software such as email, human resources, sales and accounting platforms. That has changed, said Edgard Capdevielle, president and chief executive of Nozomi, as companies have digitized their work environments in recent years and the threats to these systems have grown.
“Folks are realizing that as these networks move to the purview of the chief information security officer, which is a trend that is happening aggressively after Colonial Pipeline, they need to be protected,” he said, referring to a ransomware attack on the U.S. pipeline operator in 2021, which forced the closure of the largest fuel artery on the East Coast for six days and prompted significant government action on cybersecurity.
Manufacturers Mitsubishi Electric and Schneider Electric participated in the round. Previous investors in Nozomi, which has raised around $250 million to date, include manufacturing companies Honeywell , Johnson Controls and Keysight Technologies, as well as the venture arm of the U.S. Central Intelligence Agency, In-Q-Tel.
Capdevielle said the funding will be used for product development and expanding the company’s global sales reach. During its Series D round in 2021, the company had described the funding as pre-IPO, and Capdevielle said that is still an ambition for the company, albeit secondary to growth.
“I think after this round, we would have the optionality of IPO. But we don’t see [an] IPO as an end goal, we see it as a milestone and as yet another option for the company to source money. But our ultimate goal is category domination,” he said.
Nozomi is the latest operational-technology specialist to secure significant funding over the past year. In September, industrial cybersecurity company Dragos completed a $74 million Series D extension round, and last week, cyber defense company Claroty raised $100 million in strategic financing.
Industrial cybersecurity has become a hot-button topic since Colonial’s attack, but warnings from the U.S. government and its allies about threats to critical infrastructure have escalated of late. Senior law enforcement and intelligence officials, including the director of the Federal Bureau of Investigation, Christopher Wray, have said that attempts to break into networks by nation-states such as China are at a record high. Beijing has consistently denied involvement in cyberattacks.
Ransomware groups, which have gone after softer targets in IT networks historically, are also intensifying their strikes against industrial control systems, programmable logic controllers and other platforms that govern the day-to-day operations of heavy machinery used in vital industries, such as wastewater management.
“We think this trend towards not just connected devices but cyber-physical systems is creating more of a challenge than any of us are comfortable with,” said Scott Westlake, vice president of strategic innovation at Keysight, which is both an investor in and a customer of Nozomi.
Nozomi Networks Extends Partnership with Yokogawa to Deliver OT and IoT Security Services Worldwide
Nozomi Networks OT and IoT visibility and threat detection capabilities now part of Yokogawa's Cybersecurity Managed Services offered to customers in 60 countries worldwide
SAN FRANCISCO - Nozomi Networks Inc., announced it has extended its partnership with Yokogawa Electric Corporation (TOKYO: 6841), to address global demand for managed security services and solutions designed to holistically satisfy the unique OT and IoT cybersecurity requirements of process manufacturers. Yokogawa will offer Nozomi Networks' advanced solutions for OT and IoT visibility, network monitoring and threat detection to customers worldwide as part of Yokogawa's OpreX Managed Services. Yokogawa will also resell standalone solutions from Nozomi Networks to customers who manage their security programs in-house.
"With Nozomi Networks, our customers have access to the industry's best OT and IoT network monitoring and threat detection fully supported by Yokogawa's Managed Services," said Katsunori Iijima, General Manager of Cybersecurity Management at Yokogawa Electric. "We're pleased to extend a very successful relationship we started several years ago in Europe. By partnering with Nozomi, we are able to rapidly deliver deep OT and IoT cybersecurity expertise, using battle-tested solutions that our customers are demanding."
"We are excited to strengthen our relationship with Yokogawa to help more organizations meet their growing need for critical OT and IoT cybersecurity solutions," said Chet Namboodri, Nozomi Networks Senior Vice President of Global Partner Sales and Development. "With an established track record of collaboration in the process industries sector, we firmly believe this partnership accelerates our joint mission to help protect process automation assets and networks around the world from compromise."
Recognized as the market leader in OT and IoT security, Nozomi Networks is valued for superior operational visibility, advanced OT and IoT threat detection and strength across deployments. Nozomi Networks solutions support more than 102 million devices in thousands of installations across energy, manufacturing, mining, transportation, utilities, building automation, smart cities and critical infrastructure. Launched in August 2021, Nozomi Networks' MSSP Partner Program is the industry's first complete program for OT and IoT managed security services. The program fully equips MSSPs with Nozomi Networks' award-winning OT and IoT cybersecurity solutions, expertise and selling resources. Customers gain the flexibility and maximum value they need when it comes to strengthening their OT and IoT security postures while balancing resource requirements.
As industrial organizations embrace an increasingly connected world, they must also prepare to defend against a growing number of digital threats and vulnerabilities. Manufacturers must be vigilant and able to quickly detect and respond to cyber security threats. Yokogawa is continuously investing in secure products, solutions, programs, organizations, services and managed services as part of its commitment to quality, safety, security, reliability and sustainability, with highly competent and experienced resources worldwide. Such expertise not only ensures high-level protection during project design and implementation but is also inherent within Yokogawa's highly adaptable lifecycle service and support business, ensuring ongoing safe and secure operations.
SAN FRANCISCO - Nozomi Networks Inc., announced it has extended its partnership with Yokogawa Electric Corporation (TOKYO: 6841), to address global demand for managed security services and solutions designed to holistically satisfy the unique OT and IoT cybersecurity requirements of process manufacturers. Yokogawa will offer Nozomi Networks' advanced solutions for OT and IoT visibility, network monitoring and threat detection to customers worldwide as part of Yokogawa's OpreX Managed Services. Yokogawa will also resell standalone solutions from Nozomi Networks to customers who manage their security programs in-house.
"With Nozomi Networks, our customers have access to the industry's best OT and IoT network monitoring and threat detection fully supported by Yokogawa's Managed Services," said Katsunori Iijima, General Manager of Cybersecurity Management at Yokogawa Electric. "We're pleased to extend a very successful relationship we started several years ago in Europe. By partnering with Nozomi, we are able to rapidly deliver deep OT and IoT cybersecurity expertise, using battle-tested solutions that our customers are demanding."
"We are excited to strengthen our relationship with Yokogawa to help more organizations meet their growing need for critical OT and IoT cybersecurity solutions," said Chet Namboodri, Nozomi Networks Senior Vice President of Global Partner Sales and Development. "With an established track record of collaboration in the process industries sector, we firmly believe this partnership accelerates our joint mission to help protect process automation assets and networks around the world from compromise."
Recognized as the market leader in OT and IoT security, Nozomi Networks is valued for superior operational visibility, advanced OT and IoT threat detection and strength across deployments. Nozomi Networks solutions support more than 102 million devices in thousands of installations across energy, manufacturing, mining, transportation, utilities, building automation, smart cities and critical infrastructure. Launched in August 2021, Nozomi Networks' MSSP Partner Program is the industry's first complete program for OT and IoT managed security services. The program fully equips MSSPs with Nozomi Networks' award-winning OT and IoT cybersecurity solutions, expertise and selling resources. Customers gain the flexibility and maximum value they need when it comes to strengthening their OT and IoT security postures while balancing resource requirements.
As industrial organizations embrace an increasingly connected world, they must also prepare to defend against a growing number of digital threats and vulnerabilities. Manufacturers must be vigilant and able to quickly detect and respond to cyber security threats. Yokogawa is continuously investing in secure products, solutions, programs, organizations, services and managed services as part of its commitment to quality, safety, security, reliability and sustainability, with highly competent and experienced resources worldwide. Such expertise not only ensures high-level protection during project design and implementation but is also inherent within Yokogawa's highly adaptable lifecycle service and support business, ensuring ongoing safe and secure operations.
SÃO PAULO - Nozomi Networks, announced Gerdau, the leading steelmaker in Brazil, has chosen the Nozomi Vantage platform to safely monitor its technological advancements in Industry 4.0. Vantage supports business continuity and reduces operational risk in a sustainable way.
As Gerdau’s industrial environment becomes hyperconnected, features such as process visibility, asset inventory, anomaly control, and cloud-based scalability have become essential to achieve the company’s aggressive business innovation goals without compromising either resiliency or Gerdau’s strict requirements for cybersecurity.
To meet these needs, Gerdau chose Nozomi Networks’ Vantage platform. The cloud-based solution provides an added layer of cybersecurity. It offers flexible options for implementation that promote economies of scale and reduce operational cost. Plant operators and security professionals have access to risk management resources and reports in an easy, secure manner, with privacy, agility, and accessibility from anywhere at any time. Because it is a SaaS model, Vantage allows Gerdau to create unlimited virtual machines (VMs) and have the flexibility to distribute monitoring resources where they are needed within the company's architecture to get the best possible visibility of the environment.
Vitor Sena, global CISO at Gerdau, sees the OT cybersecurity approach as a point that needs to be worked on very carefully, because it is not the same as the IT approach. He points out that the cost of not protecting an OT environment will always be higher. "For critical infrastructure, the main security aspect is availability, so we can't apply the standard IT security concept to OT because it simply won't work. The configuration needs to be customized to allow for quick detection of any incident. Nozomi Networks' Vantage brought us the clarity we needed in our environment and the scalability and flexibility that we wouldn't have with a traditional security model," concludes Sena.
Asset inventory and control of operational and cyber anomalies is quickly becoming a priority in industrial environments like Gerdau’s, as they are strongly associated with operational risk reduction, business continuity, and cyber and physical security. In addition, asset inventory also assists in predictive maintenance on machinery, reducing the chances of downtime and failure.
Nycholas Szucko, Nozomi Networks LATAM Regional Director, says it is gratifying to see Gerdau and other large Brazilian companies increasingly prioritizing security in their innovation initiatives. "The asset inventory, for example, is fundamental to mapping the connected devices and, from there, apply the necessary security controls. After all, it is only possible to protect what can be seen. When decision makers understand this importance and we are part of projects like Gerdau's, we know that we are on the right path and that the cybersecurity maturity of the companies in LATAM are evolving," explains Szucko.