- August 11, 2010
August 11, 2010 ‚Äì Guidance Software and Lofty Perch introduced EnCase Cybersecurity to give companies ‚Äì such as those in the utilities and energy space ‚Äì the power to discover malicious or improper files and expedite restorative activities in industrial automation environments through the forensic-based critical infrastructure security solution. Until now, industrial control and SCADA systems asset owners and operators have struggled with how to perform critical forensics without taking mission-critical systems offline. With Guidance Software EnCase technology, operators can perform forensic analysis while systems are operational with little impact to performance and availability. ‚ÄúThere is a clear need for cyber forensics and incident analysis management capabilities for industrial automation,‚Äù said Bob Radvanovsky, a leading expert on SCADA security and co-founder of Infracritical, a firm that provides research and information security awareness programs to critical infrastructure throughout North America. ‚ÄúThis effort will combine the expertise of Lofty Perch and Guidance Software to deliver a first-of-its-kind capability to address the emerging problem of cyber forensics within the industrial automation domain.‚Äù SCADA/Incident Command Systems (ICS) were not designed to be exposed to external domains. Recent convergence of formerly disparate systems has opened critical infrastructure up to security threats and vulnerabilities traditionally only found in the IT sector. The recent Stuxnet worm showcases the growing threat, with the emergence of customized malicious software that exploits zero-day vulnerabilities and specifically targets SCADA systems. Due to high availability and performance requirements, combined with legacy technologies, these systems often lack the capability to support forensic analysis after an incident or system failure. As a result, administrators are unable to determine if the system experienced a normal failure or a security attack. Lofty Perch will offer cybersecurity solutions that include Guidance Software EnCase Cybersecurity enterprise software to help determine whether abnormal system behavior or failures are the result of a cyber attack or benign system nuances.