New Vulnerability Assessment Tool from Toshiba and Peraton Labs Strengthens Cyber Resilience of Infrastructure

TOKYO-Toshiba Corporation (TOKYO: 6502) and Peraton Labs today announced a new jointly-developed vulnerability assessment tool that emulates cyberattacks on industrial control systems. Dubbed Automated Attack Path Planning and Validation (A2P2V), this powerful new tool automatically generates cyberattack scenarios and simulates attacks that combine advanced offensive techniques to test and determine control system security status. It verifies results to identify security threats that need to be prioritized among the increasing number and range of cyberattacks.

A2P2V combines industrial control system configuration data with various publicly available attack techniques, and automatically generates and executes cyberattack scenarios that verify the strength of the system's security. Toshiba and Peraton Labs have successfully demonstrated automated attacks in a simulated environment that revealed security flaws. By identifying industrial control systems vulnerabilities that can be attacked, A2P2V supports the identification of security threats that must be prioritized among the increasing number of cyberattacks and raises the ability to respond.

'With more and more devices connected to networks, cyber threats have now expanded to include industrial control systems and products, which traditionally operated in a safe and enclosed environment,' said Yutaka Sata, Ph.D., Corporate Officer and Director of Corporate Research & Development Center, Toshiba Corporation. 'Toshiba provides various products and solutions for critical infrastructure, and is responsible for keeping them secure even if they are connected to external networks. With A2P2V and other security technologies, Toshiba will ensure their robustness against evolving cyberattacks.'

'With the increasing volume and sophistication of cyberattacks, the ability to create novel attack scenarios and prioritize threats is essential for protecting critical infrastructure and industrial control systems,' said Petros Mouchtaris, Ph.D., president, Peraton Labs. 'As a leader in cyber research, Peraton Labs looks forward to the continued development of innovative tools and solutions to defend industrial, military and commercial infrastructure from complex, multi-faceted attacks.'

Figure 1: Concept of A2P2V

Figure 2: A2P2V in operation (Demo)

Toshiba and Peraton Labs will present the tool at Black Hat USA 2021 Arsenal on August 4-5, 2021, and share a sample of the code. By opening the source, Toshiba and Peraton Labs look forward to collaboration with the cybersecurity community and organizations in the creation of value through open innovation.

Toshiba and Peraton Labs will continue to harness cyber-physical systems (CPS) technology, drawing on their leading digital and cyber expertise and Toshiba's over 140 years of experience in manufacturing, to deliver solutions that strengthen the cyber resilience of control systems, and support the realization of a society free from cybercrime.

Toshiba Corporation leads a global group of companies that combines knowledge and capabilities from over 140 years of experience in a wide range of businesses-from energy and social infrastructure to electronic devices-with world-class capabilities in information processing, digital and AI technologies. These distinctive strengths support Toshiba's continued evolution toward becoming an Infrastructure Services Company that promotes data utilization and digitization, and one of the world's leading cyber-physical-systems technology companies. Guided by the Basic Commitment of the Toshiba Group, 'Committed to People, Committed to the Future,' Toshiba contributes to society's positive development with services and solutions that lead to a better world. The Group and its 120,000 employees worldwide secured annual sales surpassing 3.1 trillion yen (US$27.5 billion) in fiscal year 2020.
Find out more about Toshiba at https://www.global.toshiba/ww/outline/corporate.html

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our 22,000 employees do the can't be done, solving the most daunting challenges facing our customers. Visit Peraton.com/News and follow Peraton on LinkedIn for news and updates.