Threat landscape for industrial automation systems in H1 2021

[harlan4096]

The H1 2021 ICS threat report at a glancePercentage of ICS computers attacke

1. During the first half of 2021 (H1 2021), the percentage of attacked ICS computers was 8%, which was 0.4 percentage points (p.p.) higher than that for H2 2020.

Numbers per country varied from 58.4% in Algeria to 6.8% in Israel.

When we look at regional numbers, Africa led with 46.1%, followed by Southeast Asia at 44.1%, East Asia at 43.1% and Central Asia at 42.1%.

2. he largest increases in the percentage of attacked ICS computers during H1 2021 were as follows:

• Over 10 p.p. in Belarus (50.4%) and Ukraine (33.1%);
  
• 4 p.p. in the Czech Republic (20.2%) and Slovakia (24.3%);
  
• 5 p.p. in Hong Kong (20.8%);
  
• 6 p.p. in Australia (23%) and Cameroon (45.2%).
  

The internet was the main source of threats causing these increases.

3. The percentage of ICS computers on which threats were blocked decreased in all monitored industries. This was especially noticeable in the oil and gas (36.5%) and building automation (40.3%) sectors (-7.5 p.p. and -6.3 p.p., respectively).Major threat sourcesThe internet, removable media and email continue to be the main sources of threats to computers in ICS environments.

1. Threats from the internet were blocked on 18.2% of ICS computers

2. (+1.5 p.p.).

In H1 2021, the largest increases in this indicator were observed in Belarus (+12.2 p.p.), Ukraine (+8 p.p.) and Russia (+6.7 p.p.)

Russia led the regional rankings with 27.6%.

Belarus leads in the country rankings with 32.8%.

3. Threats arriving via removable media were blocked on 5.2% of ICS computers (-0.2 p.p.), which continued a downward trend that began in H2 2019.

Africa leads noticeably in the regional rankings with 15.6%. In H1 2021, the percentage of ICS computers on which threats were blocked when removable media were connected decreased in Asian regions.
...

Full Report