The heightened threat of targeted and complex cyberattacks is prompting the maritime sector to look for ways to improve network security
Perpetrators continue to devise new ways to exploit the vulnerabilities of a vessel’s network. Security investments onboard vessels need to include detection and response - not just prevention such as a regular anti-virus. NDR is a vessel’s best protection strategy against any cyber attack. Port-IT is the first IT cybersecurity provider to launch a fully maritime tailored NDR solution.
Network Detection and Response (NDR) is a security solution used to detect and prevent malicious network activity, investigate and perform forensics to determine root cause, and then respond and mitigate. Therefore protecting organizations against cyber threats. Implementing NDR also gives organizations greater visibility into what is actually on the network as well as all activities. In turn, this will enable security teams to identify and stop suspicious network activity rapidly and minimize its impact on a daily business. In short: NDR can detect what a UTM cannot!
Defending against evolving threats onboard vessels
Port-IT now introduces NDR specifically developed for the Maritime Industry. Implementing NDR is regarded as an important step in protecting vessels against the increasing cyber threat in the maritime market. Port-IT NDR silently monitors the vessel’s network, watching for malicious events or suspicious traffic, even between devices only used internally, such as the VDR and a guest PC. Once this kind of traffic is detected the solution will deploy forensics, mitigate the issue and instantly informs the Port-IT Security Operations Centre (SOC) team. To detect malicious kinds of traffic it uses a combination of artificial intelligence, machine learning and user-defined policies, offering intelligent layers on which the configuration can be strengthened. Port-IT NDR uses NTA, Network Traffic Analysis. NTA does not only monitor the network perimeter, but more importantly all traffic within the network for complete coverage. NDR detects threats across the entire network, including BYOD & IoT devices and even advanced unknown attacks that other solutions have missed.
With NDR it is not needed to install software on any device, hence it is the ultimate solution to detect malicious activity from or within a network, regardless if it is crew, business or a guest network. NDR can be used on commercial vessels and fits in perfectly on yacht networks to monitor the traffic of its guests.
The Port-IT NDR solution seamlessly integrates with all existing security products of the Port-IT portfolio, providing the shipping companies with a full security-minded overview of all network elements of the vessel. Received data is monitored 24/7 and analyzed by a team of maritime trained network/security engineers.
For more information about Network Detection & Response please visit our website