Press Release

Nozomi Networks Tackles TRITON and the Rise of Critical Infrastructure Cyber Threats at Black Hat 2018

SAN FRANCISCO, July 25, 2018 —Nozomi Networks Inc., the leader in real-time cyber security and operational visibility for industrial control systems (ICS), today announced that it will share insights from its extensive research on TRITON at Black Hat USA 2018. The company will show how TRITON, the latest and one of the most sophisticated attacks on an ICS system, was developed, why it failed and what anyone seeking to secure critical infrastructure can do to help keep it safe.

In the face of TRITON and a growing number of threats targeting energy and other critical infrastructure, the pressure is on to secure operational networks. According to the Annual Black Hat Attendee Survey, nearly 70 percent (up 10 percent from last year) believe that a successful cyber attack on U.S. critical infrastructure will occur in the next two years. Only 15 percent believe that government and private industry are prepared to respond to a critical infrastructure breach. And while more than two-thirds of respondents think it’s likely their own organizations will have to respond to a major security breach in the next 12 months, 65 percent say they do not have enough staff to meet the threat; 53 percent feel they do not have adequate budget; and 66 percent say they themselves do not have enough training to handle the current threats and perform all the job functions required of them.

In a briefing session at Black Hat, international ICS cyber security expert Dr. Andrea Carcano, Co-Founder and Chief Product Officer at Nozomi Networks, and members of the Nozomi Networks research team will share findings from the most in-depth analysis of TRITON to date. They will provide comprehensive insights into how one of the most advanced attacks on an ICS system was developed and why it continues to pose a serious risk to critical infrastructure around the world.

Who: Andrea Carcano, Nozomi Networks CPO and Co-Founder; Younes Dragoni, Nozomi Networks Security Researcher
What: TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of ICS Forever
When: 11:15 a.m. PT, Wednesday, August 8, 2018
Where: Tradewinds EF, Mandalay Bay Convention Center, Las Vegas

*Note: Based on their extensive research of the TRITON malware, Nozomi Networks has released a Wireshark dissector for the TriStation protocol – the TriStation Protocol Plug-in for Wireshark. A second TRITON analysis tool will be released at Black Hat.

In addition to Wednesday’s TRITON briefing, Dr. Carcano will join a special session with Fortinet to discuss how innovations in artificial intelligence are helping address rising threats to operational networks. Attendees will learn how applied machine learning can map, model, detect and defend industrial control systems (ICS) in real-time.

Who: Nozomi Networks Co-Founder and Chief Product Officer Dr. Andrea Carcano
What: New Cyber Security Technologies and Methods for Today’s CISO
When: 2 p.m. PT, Wednesday, August 8, 2018
Where: Fortinet Theater, Mandalay Bay Convention Center, Booth #828

Also during Black Hat 2018, Nozomi Networks will participate in an exclusive BrightTALK @ Black Hat panel produced by BrightTALK in partnership with ITSPmagazine. Cyber security veteran Chenxi Wang, a Managing General Partner at Rain Capital, will moderate the panel of security experts as they explore how artificial intelligence and machine learning are being used to power cyber security attacks, and detect and respond to them faster.

Who: Nozomi Networks Director of Research and Strategy Paul Smith joins a panel of security experts
What: AI-Armed Cyber Adversaries: Cyber Crime & Defense in 2018
When: 10:30 am. PT, Tuesday, August 7, 2018
Where: Live Streaming from Black Hat

Now in its 21st year, Black Hat is the world’s leading information security event, offering attendees the very latest in research, development and trends. Black Hat USA 2018 opens August 4th at the Mandalay Bay Convention Center in Las Vegas, with four days of technical training followed by the two-day conference (August 8-9).

About Nozomi Networks

Nozomi Networks protects the world’s critical infrastructure from cyber threats. Our platform uniquely combines network and endpoint visibility, threat detection, and AI-powered analysis for faster, more effective incident response. Customers rely on us to minimize risk and complexity while maximizing operational resilience.

Global Press Contact

Jill Backstrom - 303.913.1650

Read the Nozomi Networks Blog - Follow Nozomi Networks on Twitter and LinkedIn