Blog

Specialized blog with informative contents destined to a public with marked technical profile, in order to improve knowledge and create a culture about the security in Internet.

Post related to: Best practices

Ransomware: preventative measures (I)

Cyberattacks using ransomware are one of the main threats for companies all over the world, and Spain is the tenth most affected country. This article, the first in a series dedicated to this subject, will provide a detailed list of recommendations for preventative measures dedicated to hardening in order to deal with such attacks.

Tags:

Bastioning procedures

Best practices

Critical infrastructures

International cyberresilience frameworks for critical infrastructures

This article reviews some of the most representative cybersecurity and cyberresilience frameworks that can be found in Spain, Europe, the US and the UK, and whose adoption can help organisations to further improve their cybersecurity protection capabilities.

Tags:

Bastioning procedures

Best practices

Continuity

Critical infrastructures

Control of multicast requests in the IEC 61850 standard

In previous articles an introduction was given to the 61850 regulation and the different protocols of which it consists. As explained in those articles, the GOOSE and SV (Sample Values) protocols, included in the standard, use multicast frames. Security is very difficult to implement in this type of frame, but there are a number of measures that make possible to raise the security level.

Tags:

Best practices

Critical infrastructures

Data protection

Industrial Control System

Industrial protocol

Safe development

Threats

Technologies shaping the electricity grid of the future

In recent years we have witnessed the evolution of the electrical grid and the development of new technologies produce what we know today as the smart grid. This evolution continues to this day and the trend seems to point to greater interconnection between end consumers and the grid, which increases possible attack vectors. Over the course of this article, we shall see the security measures that will be used in the electrical grid of the future.

Tags:

Best practices

Continuity

Critical infrastructures

Secure remote access in ICS

With the arrival of industry 4.0 to companies’ productive processes, including IIoT and Cloud, the need to control and monitor the ICS that remotely make them up arises. However, said access points should be established securely and in a controlled manner, mainly due to the criticality of these assets. This article discusses good practices, tools and methods that can be used to establish remote connections to OT networks as securely as possible.

Tags:

Best practices

Cloud computing

Critical infrastructures

Industrial Control System

Services deployment

Virtualization

Wireless

SweynTooth: Bluetooth in the spotlight

Wireless communications encompass a set of protocols that are widely used in some industrial sectors. In particular, building automation is based on these protocols, mainly using the BACNET and Lontalks protocols, but also making use of new ZigBee and Bluetooth based devices for IIoT. This article will provide information on SweynTooth, a set of vulnerabilities that affect Bluetooth technology.

Tags:

Best practices

Critical infrastructures

INCIBE-CERT technical webinars

With the aim of increasing cybersecurity knowledge, INCIBE-CERT has published a series of webinars in video format, so that, in a light and entertaining way, knowledge and technical aspects of cybersecurity can be expanded in various areas of interest, for both INCIBE-CERT's technical audience and anyone interested in cybersecurity.

Tags:

Bastioning procedures

RESIST: the ability of organizations to withstand disasters and disruptions from the digital realm

In this post we will explain the ability to resist, one of the 4 goals of the IMC model, which allows us to determine if an organization is capable of continuing with the essential services it provides, in the event of a cyberattack.

Tags:

Best practices

Critical infrastructures

Policies

Studies & stats