Waterfall Security Solutions » Press Release 2008

New Brunswick Power installs Waterfall security solution

doron — Tue, 24 Nov 2009 09:48:25 +0000

Waterfall’s technology was originally developed for the Israeli military.

Waterfall Security Solutions Ltd. has installed its Waterfall SCADA Monitoring Enabler at New Brunswick Power. Waterfall’s solutions enable network segregation (“air gapping”) and according to the company provide absolute and impenetrable security for critical networks.

Canada’s New Brunswick Power selected Waterfall’s solution to enable the secure one-way connection of its mission-critical network to its corporate network. In the past, such connections placed the mission-critical network at risk from attacks originating from the corporate network and the Internet. Waterfall’s solution allows replicating, in real-time, an operational SCADA network into the corporate network.

Waterfall’s unidirectional-connectivity security solutions are based on technology originally developed for the Israeli Defense Forces. Since it began to export the technology, the company has won deals for implementation of its solutions in civilian networks around the world.

“All around the world we are witnessing a growing threat of cyber-attacks on Critical National Infrastructures”, said Esti Peshin, CEO of Waterfall Security Solutions, “Waterfall’s high-end solution is being increasingly adopted by key players in the most sophisticated regions, allowing the company to progress and grow rapidly even in today’s economic climate.”

Ludan Software and Control Systems participated in the installation.

Published by Globes [online], Israel business news – www.globes.co.il – on December 18, 2008

Internet Security Systems: a View on Global Cyber-Security

doron — Tue, 24 Nov 2009 09:33:15 +0000

View the article

Safety & Security International – October 2008

One Way Only – Unidirectional connectivity protects airport networks using IP cameras

doron — Tue, 24 Nov 2009 09:30:56 +0000

Airports are bustling international hubs, some providing services to hundreds of thousands of people from diverse locations on a daily basis. Overseeing airport security is an extremely complicated task, not just in the airport itself, but also on the airplanes.

IP Advantages and Risks

Although some analytic capabilities are available as addons to analog systems, the full technological advantages are only available in IP networks, where seamless integration with additional systems provides added functionality as well as greater simplicity and efficiency.guards the guard?

Following the Sept. 11, 2001, terrorist attacks, a greater focus on airport security arose specifically designed to revent terrorist activity. Naturally, technology has been harnessed to aid in this challenge. One example is the growing deployment of advanced IPbased video surveillance systems. However, one must not forget other grave security concerns in airports— ranging from air traffic control systems to securing an airport’s energy systems such as generators, air conditioning, customs and border control computers, and Xray machines.

Today, such energy centers are computer-controlled and monitored and, therefore, must be protected against cyber attacks. Technological innovations can greatly assist in providing improved security. IP-based surveillance systems have many benefits over older-generation analog and digital systems. For example, IP cameras enable on-camera automated alerting, generated in response to predefined events. Furthermore, IP-based surveillance systems allow the possibility of advanced and automatic analytics of numerous video feeds to identify predefined events, threats and fraud.

However, when handled with insufficient attention and prudence, technology can become a doubleedged sword. Despite their undisputed advantages, IP-based surveillance systems also entail grave risks that are not relevant in analog systems. When employing IP surveillance, an attacker can access a surveillance network simply by disconnecting the LAN cable of a camera—often located outside of the physical security perimeter or in an unattended location—and connecting it to a laptop. This allows access to other devices on the same network, for instance any additional cameras, surveillance servers, monitors and storage.

If the network is connected to additional airport networks, the hacker can access these networks as well. Thus, a hacker is able to cause a wide range of damage to airport security, including blocking a camera or a set of cameras, shutting down the entire surveillance system and changing or deleting stored video footage. If the surveillance network is connected to additional networks, the hacker also can interrupt IT systems across the airport.

If the access and entry control system is reached, a hacker can manipulate and operate security access controls within the airport, permitting entry to closed highsecurity zones. Where wireless technology (Wi-Fi or Wi- Max) is used to connect cameras in areas with no cable infrastructure, the hacker’s task is even easier as no physical tapping is necessary. The fact is, IP cameras function as guards but are often not sufficiently guarded themselves. The critical question then becomes who

Unidirectional Protection

When dealing with airport security, one must deploy a powerful and absolute security solution that is not vulnerable to standard attack technologies and is immune to software flaws, bugs and, of course, human errors. To fully protect such networks, a foolproof and futureproof solution is required. Unidirectional connectivity is the only security solution that can provide full protection to such remote monitoring networks.Innovative SecurityA secure unidirectional communication system must enforce its unidirectional data flow by means of physical hardware as opposed to software and other logical ways. The system is comprised of two hardware components that are physically capable of communicating with each other, one way only. One component can only transmit to the other, and not vice versa. This is accomplished by connecting the two components via fiber-optic cable with the transmitting component having only a transmitter—a laser LED—and the receiving unit having only a receiver—a photoelectric cell. In such a way, data can physically flow only from the transmitter to the receiver.

The double-edged sword facet of advanced technology is well reflected in air traffic control technology as well. Naturally, the more sophisticated the means at the disposal of air traffic control personnel, the better they are equipped to coordinate aerial activity and secure airplane takeoffs and landings within their airspace. However, sophistication normally means connectivity to additional information and data sources, which in turn means greater threat exposure.

Receiving remotely generated air-traffic control video feeds is a good example of a technological advancement that has improved the air-traffic security generated with more informed and aware personnel but also has increased networks’ vulnerability by complex interconnections and distributed security responsibilities. There is no shortage of news about similar critical systems being cyber attacked or found vulnerable to such attacks when pre-emptively inspected.

Likewise, systems such as an airport’s energy center most often are remotely monitored to ensure functionality of mission- critical services. Remote monitoring, however, also entails connectivity to external sources and networks, thus exposing the monitored network to attack.

Unfortunately, it has been proven time and again that even with the use of security products such as firewalls, intrusion detection and prevention systems, there is never a guarantee of full protection against attacks because all software and logic-based solutions are vulnerable and prone to remote manipulation. Considering that airports and airplanes are some of the most lucrative terrorist targets, the premise must be that a lot of effort would be invested in order to overcome potential threats. Therefore, none of the above-mentioned solutions provide the adequate level of security required to protect airport mission-critical networks.

A unidirectional connection, also referred to as a one-way link, is a communication appliance that allows data to pass through in one direction only. Thus, video streams and camera metadata can be transferred only from a camera to the airport’s surveillance network, and not vice versa. Similarly, there would be no bidirectional connection with air traffic control networks, and thereby threats of cyber attacks would be completely eliminated. As for an airport’s energy centers, data necessary for monitoring will be passed from the energy center to the monitoring network or to third-party maintenance and control centers, but not vice versa. Therefore, once more, no online attack against the energy center would be possible.

The point in each of these scenarios is that where data must logically flow in one direction only, a unidirectional link can be implemented, enforcing strict security without impairing functionality.

To facilitate reliable data transfer over a unidirectional medium, a unique communication protocol must be mplemented. This protocol adds communication reliability, as well as another layer of security to the system, by allowing transfer of the payload. For example, raw video data in IP video surveillance only means stripping it from headers and other protocol fields commonly used to facilitate malicious attacks.

Based on patent-pending technology, this unidirectional connectivity concept can be implemented for securely transmitting any type of remote monitoring data, be it video streams, air traffic control data or any other type of data pertaining to remote monitoring scenarios. In every scenario, the unidirectional link will enable data to flow securely from the sensor to the monitoring network or monitoring and control center.

As the data will be flowing only one way, there will be no threat of online hacking attacks. There simply will be no return link at the hacker’s disposal. Airport security officials should use the added advantages technology offers them when battling terrorism, crime or accidents. The solution lies with the only available foolproof and future-proof security technology—unidirectional connectivity.

View the article

By Lior Frenkel, Sep 01, 2008

Problem Solvers; Waterfall Solutions Ltd., IP Surveillance Enabler

doron — Tue, 24 Nov 2009 09:16:42 +0000

View the article

Security Products – July 2008

Waterfall Solutions launches impenetrable suite for securing remote monitoring

doron — Tue, 24 Nov 2009 09:18:13 +0000

Remote infrastructure management and managed systems are fast growing markets. The existing security solutions are not secure enough and do not protect businesses against corporate espionage, cyber terror, and other emerging online threats. Waterfall Solutions Ltd. has launched the first impenetrable suite for securing remote monitoring.

Remote monitoring entails connecting production networks and equipment over public networks to a control center or to a third party, which provide monitoring and maintenance services. Without the WF-SRM suite businesses employing remote monitoring would be exposed to data theft, online attacks and other related threats.

The WF-SRM suite is the only unidirectional solution that also allows for a secure manual uplink, providing the end user the complete security of unidirectional connectivity while affording the convenience of the SMU capability.

“As the threat of cyber-terror and online attacks grow in the remote monitoring industry, the WF-SRM suite will prove to be the only sure-fire solution that will keep your remotely managed facilities fully secure, while providing the customer with flexible and controlled maintenance capabilities when required”, said Lior Frenkel, Waterfall Solutions’ Co-Founder and CTO. “For the first time end users can enjoy the benefits of remote monitoring without having to compromise their security.”

View the article

Security Park 18/07/2008

Firewalls against terrorists?

doron — Tue, 24 Nov 2009 09:14:39 +0000

As the Security Israel 2008 convention opens today, representatives from all over the world will come to see what country’s finest security companies have to offer. One emerging market that they will be focusing on will be the growing need for securing IP (Internet Protocol) video surveillance.

Imagine what would happen if terrorists were able to penetrate the control center of a critical national infrastructure, such as a national gas line. Controlling such a facility would enable the terrorists to cause unimaginable destruction. Unfortunately, such a scenario is not imaginary.

Critical national facilities are prime targets for terrorist activities. Several years ago terrorists attempted to blow up Pi Glilot (gas depot in Israel) by placing explosives on a fuel truck that was supposed to enter the compound. Such attempts have occurred in Israel as well as around the world.

Consider how much easier the terrorists’ task would be if they could hack the control center of a critical infrastructure from the comfort of their home. Over the past few years there have been several reports of cyber attacks on control systems of nuclear power plants, sewage systems, transportation facilities, etc. Only recently the CIA disclosed that cyber attacks have caused at least one major power outage affecting multiple cities outside the US.

There is a well-known tradeoff between the security of a modern business and business requirements. While the latter requires increased connectivity to the critical national infrastructure’s network, the former promotes complete segregation of the facility’s network from the outside world.

The benefits of connectivity and the growing dependency on it have risen to a stage where complete segregation is impractical and impossible.

One area where this dissonance is even more pronounced is the area of Physical Perimeter Security, a fast growing market that is rapidly shifting to IP-based technology.

Organizations install modern IP-based surveillance networks in order to improve their facility’s physical security. Doing that unfortunately may reduce the overall security of their organization. Whereas IP-based surveillance networks provide greater efficiency, IP communication also entails great risks. An attacker can gain access to a surveillance network by simply connecting a laptop in place of a camera. This allows access to other devices on the same network (e.g. additional cameras, access control systems) and if the network is connected to additional networks, the hacker can gain access to these networks as well. The resulting damage can be immense.

Israel is one of the innovators of security technologies, trying constantly to stay ahead of hackers and provide the means for protecting IT infrastructures. Israel’s position in the world of security could not have been more evident than at the recent ISC-West International Security Conference and Exposition, where Hebrew was in many booths as useful a language as English.

The ISC-West conference focuses mainly on surveillance technologies and draws tens of thousands of visitors aiming to be a part of the growing trend of migration from analog based surveillance to the modern IP-based capabilities.

Naturally, Israel is not ignorant of the new security risks posed by this new trend. The industry provides a wide range of solutions to these threats. Firewalls, intrusion prevention systems and anti-viruses are only some of the technologies used to secure data and infrastructures. However, none of these solutions provide complete protection. Software-based security measures have vulnerabilities and exploits and are not immune to human errors. Given enough time and effort they can be hacked and circumvented.

When looking to protect sensitive or mission critical facilities, one must consider that hackers will go to great lengths to cause damage. One must keep in mind that in real life terrorists are willing to be killed while performing terrorist attacks. Thus, one must deploy a solution, which is not vulnerable to standard attacks. A full proof, fool proof and future proof solution is required. One of the promising trends in the network security world is that of unidirectional connectivity, a concept which provides precisely these security requirements.

A unidirectional connection is a system that allows data to pass between networks in one direction only. A secure unidirectional communication system must enforce its unidirectional data flow by means of physical hardware as opposed to software and other logical ways.

Unidirectional connectivity provides complete security against threats inherent in IP-based surveillance. The idea is transmitting video feeds through a unidirectional link. This architecture creates an impenetrable gateway preventing hackers from penetrating the network. Even if a hacker obtains physical access to a camera, he will not be able to create additional damage, as the unidirectional gateway creates a barrier to online attacks.

Israeli companies are leading the trend of migrating to IP-based surveillance supplying the customers with innovative technologies to better monitor their facilities, and also to enable the capabilities, which secures the surveillance system. Thus providing mission critical organizations the ability to reap the benefits of IP-based surveillance without compromising their security requirements.

View the article

By Esti Peshin , THE JERUSALEM POST

June 24, 2008

Waterfall Launches SRM Suite; the impenetrable solution for Securing Remote Monitoring

doron — Tue, 24 Nov 2009 09:12:58 +0000

Waterfall’s new secure manual uplink (SMU) technology complements the company’s unique comprehensive solution for securing remote monitoring

TEL AVIV, Israel, June 10th 2008 – Waterfall Solutions Ltd., the leading provider of secure unidirectional connectivity for Remote Monitoring, IP Surveillance Infrastructure & SCADA Systems launched today the first impenetrable suite for securing remote monitoring.

Remote infrastructure management and managed systems are fast growing markets. The existing security solutions are not secure enough and do not protect businesses against corporate espionage, cyber terror, and other emerging online threats. The WF-SRM suite is the only unidirectional solution that also allows for a secure manual uplink, providing the end user the complete security of unidirectional connectivity while affording the convenience of the SMU capability.

View the article

By Josh Reinstein, CCTViNFO.COM

June 10, 2008

Waterfall Solutions LTD., to Attend the 2008 IFSEC Conference

doron — Tue, 24 Nov 2009 09:10:29 +0000

TEL AVIV, Israel, May 8 /PRNewswire/ — Waterfall Solutions Ltd., the leading provider of secure unidirectional connectivity for IP based Surveillance Infrastructure, SCADA systems, Remote Infrastructure Monitoring and Segregated Networks announced today that Waterfall Solutions will attend the 2008 IFSEC Conference at the National Exhibition Center (NEC) in Birmingham, England.

Waterfall Solutions will display its WF-ISE Plus with PTZ capabilities at the conference. Demos of the WF-ISE will be available for select OEM and carrier partners to evaluate. Waterfall Solutions will exhibit at booth # 21198 during the four day conference from May 12th to May 15th. Additionally, Waterfall Solution’s management will be available for separate one-onone meetings with interested partners.

“IFSEC is the ideal setting for us to display the first security solution that enables companies and organizations to enjoy the advantages of IP-based surveillance without suffering from the dangers inherent in network connectivity.” said Esti Peshin CEO of Waterfall Solutions. IFSEC is Europe’s largest physical and electronic security event. http://www.ifsec.co.uk

About Waterfall Solutions:

Waterfall Solutions Ltd. is the leading provider of secure unidirectional connectivity for Segregated Networks, IP Surveillance Infrastructure and SCADA Systems. Developed in 2004 to meet the needs of the Israeli Defense Industry, Waterfall has been deployed in many homeland security and critical national infrastructure organizations, as well as a large variety of financial & enterprise customers.

The Company is expanding globally through channels, OEM, and technology partnerships.

View the article

May 8, 2008 Yahoo Finance

Waterfall Solutions LTD., to Present at the 2008 ENTELEC Conference

doron — Tue, 24 Nov 2009 09:07:13 +0000

TEL AVIV, Israel, March 28 /PRNewswire/ — Waterfall Solutions Ltd., the leading provider of secure unidirectional connectivity for SCADA systems, IP based Surveillance Infrastructure and Segregated Networks announced today that Lior Frenkel, Waterfall Solutions co-founder and CTO, will present at the 2008 ENTELEC conference at the George R. Brown Convention Center in Houston Texas.

In a presentation at 9:30am on Thursday, April 10th, Mr. Frenkel will give the key-note address on the topic of “A Realistic Approach for Connecting SCADA/DCS Networks to Administrative or Less-Secure Networks”. Additionally, that same day, Mr. Frenkel will be available for separate one-on-one meetings with interested partners.

The Entelec conference is focused on communications and control technologies used by petroleum, natural gas, pipeline and electric utility companies. www.entelec.org

About Waterfall Solutions:

Waterfall Solutions Ltd. is the leading provider of secure unidirectional connectivity for Segregated Networks, IP Surveillance Infrastructure and SCADA Systems. Developed in 2004 to meet the needs of the Israeli Ministry of Defense, Waterfall has been deployed in many homeland security and critical national infrastructure organizations, as well as a large variety of financial & enterprise customers.

The Company is expanding globally through channels, OEM, and technology partnerships.

View the article

March 28, 2008 Reuters

Waterfall Solutions LTD., to Attend the 2008 ISC West International Security Conference and Exposition

doron — Tue, 24 Nov 2009 09:05:28 +0000

TEL AVIV, March 26 /PRNewswire/ — Waterfall Solutions Ltd., the leading provider of secure unidirectional connectivity for IP based Surveillance Infrastructure, SCADA systems and Segregated Networks announced today that Waterfall Solutions will be in attendance at the 2008 ISC WEST conference at the Sands Expo and Convention center in Las Vegas, Nevada.

Waterfall Solutions will display its new WF-ISE Plus with PTZ capabilities at the conference. Demos of the WF-ISE will be available for select OEM and carrier partners to evaluate. Waterfall Solutions will exhibit at booth # 15125 during the three-day conference from April 2nd to April 4th. Additionally, both the CEO and CTO of Waterfall Solutions will be available for separate one-on-one meetings with interested partners.

“ISC West is the perfect venue for us to present the first security solution that enables companies and organizations to enjoy the advantages of IP-based surveillance without suffering from the dangers inherent in network connectivity.” said Esti Peshin CEO of Waterfall Solutions. ISC West is the nation’s largest physical and electronic security event. http://www.iscwest.com

About Waterfall Solutions:

Waterfall Solutions Ltd. is the leading provider of secure unidirectional connectivity for Segregated Networks, IP Surveillance Infrastructure and SCADA Systems. Developed in 2004 to meet the needs of the Israeli Ministry of Defense, Waterfall has been deployed in many homeland security and critical national infrastructure organizations, as well as a large variety of financial & enterprise customers.

The Company is expanding globally through channels, OEM, and technology partnerships.

View the article

March 26, 2008 Yahoo Finance