09 July 2018

NTT FACILITIES and NTT Security Launched Security Solution for Building Control Systems in Japan

Cybersecurity solution to protect building control systems for energy management, HVAC and disaster prevention

NTT FACILITIES, INC (Head Office: Minato-Ku, Tokyo; CEO: Atsushi Ichihoshi) and NTT Security Corporation (Head Office: Chiyoda-Ku, Tokyo; CEO: Katsumi Nakata) launched Security Solution for Building Control Systems in Japan. NTT FACILITIES  incorporated NTT Security’s "Cybersecurity Solutions for Building Systems" into its Safety solutions.

Background
The smart buildings leveraging IoT technologies will provide optimal building services by orchestrating various information from sensors and systems generated by individual building systems which had been independently operated. In the smart building, building control systems such as building energy management systems (BEMS) have connectivity to the external network, and the risk on business continuity in building operations will drastically increase due to cybersecurity threats via the control system network.

Recently, the attempt of cyberattacks and cybersecurity incidents on critical infrastructures including building control systems are increasing, which span ransomware infections like WannaCry¹ to cyberweapon strikes like Stuxnet² and CrashOverride³. As for building control systems, cybersecurity incidents and attempts in air conditioning systems in hospitals, ransomware infection of the hotel’s electronic key management system, DoS attack on the stadium power control system at the London Olympic Games opening ceremony, are reported.

As the Tokyo Olympic Games and the Paralympic Games are held in 2020, risks to the availability and safety of building control systems is increasing especially in Japan, and cybersecurity monitoring and controls are becoming more important.

Overview
NTT Security supports "Cybersecurity Solutions for Building Control Systems" based on its strength in Global Threat Intelligence and Cyber Threat Advanced Analytics capabilities accumulated through its global operations.

NTT FACILITIES incorporates NTT Security’s capabilities around "Cybersecurity Solutions for Building Control Systems" on a one stop basis in to its Safety solutions, which provide effective controls on the risk mitigation of natural disasters such as earthquakes and floods, human disasters such as trespassing and fire, and equipment failures such as power outages and equipment failures, so that NTT FACILITIES would provide a comprehensive solution for continuous operation of building control systems.

"Cybersecurity Solutions for Building Control Systems" are delivered as a combination of Consulting Services (CS) and Managed Security Services (MSS). Consulting Services (CS) visualizes components and potential risks of a building control system, and provides effective and efficient security controls. Managed Security Service (MSS) provides a proactive defense for industrial control systems by continuously monitoring, detecting and blocking a cyberattack.

Contents Cybersecurity Solutions for Building Systems

Outline of Consulting Services

Outline of Managed Security Service

The role of each company

NTT FACILITIES	Provide comprehensive Security Assessment on building control systems including "Cybersecurity Solutions for Building Systems"
NTT Security	Provide technical solutions for "Cybersecurity Solutions for Building Systems"

 

Future plans
NTT FACILITIES will continue contributing to the realization of a sustainable society of “Smart & Safety” by further developing the next-generation smart buildings which incorporates “Security by Design” (a measure for securing security from the design stage), and providing building management services for secure and comfortable building controls.

NTT Security, as a pioneer of cybersecurity solutions in industrial control systems, continually strives to advance the cybersecurity services for building control systems in the IoT era, contributing to the enhancement of convenience and safety of a digital society.

Notes for editors:
¹ WannaCry
The WannaCry ransomware is a worm-like malware which spreads by exploiting the leaked NSA exploit ETERNALBLUE. The malware encrypts files, drops and executes a decryptor tool, displays a ransom notice for either $300 or $600 payable with Bitcoin, and uses Tor for C2 channels. It became extremely prevalent in May 2017.

² Stuxnet
Malware which executes targeted attacks founded in Iran in 2010. It is known for halting the control system of Iran‘s nuclear facilities. It has been said that it was developed by a sophisticated and complicated technology that infects via a network or a USB memory stick and exploits multiple vulnerabilities of the OS.

³ CrashOverride
Malware that executes targeted attacks used in the Ukraine transmission facilities attack in 2016. Hundreds of thousands of households suffered power outages.

About NTT FACILITIES
NTT FACILITIES provides one-stop solutions for buildings and energy facilities, ranging from planning and design services to construction, maintenance, operation, and upkeep services.

NTT FACILITIES also utilized its technologies in the fields of ICT, energy, and construction to the fullest extent and integrated these technologies to develop smart cities that employ natural energy and use limited energy resources in an efficient and waste-free manner and safe cities that are resilient to natural disasters and other risks.

About NTT Security
NTT Security is the specialized security company and the center of excellence in security for NTT Group.  With embedded security we enable NTT Group companies (Dimension Data, NTT Communications and NTT DATA) to deliver resilient business solutions for clients’ digital transformation needs.  NTT Security has multiple SOCs, seven R&D centers, over 1,500 security experts and handles hundreds of thousands of security incidents annually across six continents.

NTT Security ensures that resources are used effectively by delivering the right mix of Managed Security Services, Security Consulting Services and Security Technology for NTT Group companies – making best use of local resources and leveraging our global capabilities.  NTT Security is part of the NTT Group (Nippon Telegraph and Telephone Corporation), one of the largest ICT companies in the world.  Visit nttsecurity.com to learn more about NTT Security or visit www.ntt.co.jp/index_e.html to learn more about NTT Group. 

For more information, please contact:
NTT Security Japan
Mail: nsj-gb-ics@nttsecurity.com

News Releases
The services, prices of products and services, specifications, telephone numbers, etc. for inquiries and other information included in news releases are the data available on the day of the release. This information may be changed at any time without notice. In certain circumstances, due to various risks or unexpected occurrences, actual results may also be different from the plans or projections in news releases.