In 2017, TRITON malware was used to attack a gas facility, directly interacting with its Safety Instrumented System (SIS). Given the significance of this attack, Nozomi Networks conducted research to better understand how TRITON works.

Today we released a Wireshark dissector for the TriStation protocol on GitHub to help the ICS community understand SIS communications. Our complete TRITON analysis will be presented at Black Hat USA 2018.

We’re excited to tell you that Nozomi Networks and IBM Security have teamed up to address the exploding demand for effective, integrated IT/OT cyber security services and solutions. Read on to see how industrial organizations around the world now get easy access to deep OT network visibility and continuous threat detection.

Today’s business leaders are expected to manage risk for their entire organization – from enterprise IT systems to OT environments. With IT and OT systems becoming more connected, and cyberattacks on industry rising, managing risk means shifting focus to industrial cyber security.
Two of the most important measures to take are bringing together IT and OT teams and investing in new technology that improves the visibility and cyber resiliency of industrial networks.