How to use the data diode OWCD to prevent the escalation of ransomware damage.
One-way communication restriction device Data diode OWCD
Intrusion cost: 66,000 yen, recovery cost: 230 million yen. Let's effectively use data diodes (OWCD) as communication restrictions at the boundary.
The horror of ransomware lies not only in stealing data but also in its power to halt daily life. Amidst this, the "first case of autonomous ransomware" has emerged, where the entire process is executed end-to-end by AI. It steals authentication credentials, thoroughly investigates targets, and identifies the locations of crucial business secrets and personal information... Moreover, its ability to immediately correct failures is measured in seconds. The system is encrypted without any delay, and it becomes apparent that a breach has occurred in no time at all. The ability to execute end-to-end attack activities without human intervention significantly shortens the detection and containment window for defenders. However, this malware sends the information it gathers to an external AI for analysis, which then modifies the attack based on the results. By blocking the communication channel to the outside, it neutralizes its movements, allowing time for human situational assessment and other security measures or virus removal to take effect, thereby minimizing operational shutdowns. The data diode "OWCD" physically restricts communication in only one direction. There are various ways to utilize boundary restrictions. It is beneficial as part of a multi-layered defense and works well with a zero-trust approach. For inquiries, please refer to the related links below.
Inquire About This Product
basic information
Typically, the communication used in offices involves not only the data you send but also signals that control communication in the reverse direction. We replace this communication with a method that does not require the transmission of these control signals in front of the OWCD, making it unidirectional. That signal is communicated through the OWCD and decoded at the exit for your use. While communication control can also be done with firewalls and routers, the OWCD is free from configuration errors; it is a "restrictive device" that "can only allow flow in one direction" and has no reverse circuit. No signals can flow from the opposite direction, effectively shutting out remote control signals emitted by viruses and the theft of files that attackers want to extract. While reports often highlight the damage to large corporations, about 60% of confirmed ransomware incidents in Japan involve small and medium-sized enterprises. The primary targets are organizations such as manufacturing, medical institutions, local governments, and schools, where security personnel are not stationed. There is no need for settings that impose communication restrictions on the "OWCD" itself. Even if regular maintenance cannot be performed, the level of safety will certainly improve. Zero trust dislikes boundary control, but the OWCD, which imposes restrictions, is highly compatible! It is also favorable for micro-segmentation. For inquiries, please refer to the related links above.
Price information
We provide communication software compatible with various protocols that operates on a separate communication processing PC for the core products: OWCD-2 with 100MBase-T connection and OWCD-G with 1000MBase-T connection. The damage caused by ransomware is more severe the deeper it is rooted. The intrusion cost is 66,000 yen, and recovery costs 230 million yen, making it a "sustainable business." While the initial investment may be high, the reduction in lifecycle costs is significant. Zero trust leads to a cat-and-mouse game, resulting in enormous operational costs. For inquiries, please refer to the related links above.
Price range
P5
Delivery Time
※Please contact us for pricing. You can find related links above.
Applications/Examples of results
Over 150 units sold to date. We have numerous achievements in remote monitoring of thermal power plants. While I can't discuss specifics, the utilization in critical infrastructure such as government agencies, public institutions, transportation, and important sectors within companies (like critical infrastructure and research facilities) is steadily increasing. Digital transformation (DX) brings convenience but also heightens the "risk of stopping," representing a structural change. The "zero trust" model, which is often mentioned, attempts to authenticate because no one can be trusted, but conversely, it is a system based on connectivity. However, in critical infrastructure, there is a demand for "no external connections," so zero trust alone is inadequate; restrictions at the boundaries are essential. No single method can ensure complete security. It is crucial to combine various defense measures in a layered approach. In addition to the introduction this time, there are also emerging practices such as completely separating incoming communications from an unspecified number of external sources and outgoing communications to specific destinations to prevent the activities of information-gathering malware, and reliably preventing intrusions from remote maintenance lines. The use of unique solutions provided by system integrators is also rapidly increasing! For inquiries, please visit the related links above.
catalog（19）
Download All Catalogs
Company information
Our company is a member of the Mitsubishi Heavy Industries Group, serving as a design technology partner for Mitsubishi Heavy Industries, where we engage in planning and mechanical design for prime movers (steam turbines/boilers, gas turbines, water turbines), pumps, and various plants, as well as instrumentation control system planning and electrical design. In order to meet the increasingly diverse and sophisticated needs of our customers, we will continue to challenge ourselves to improve our technological capabilities, streamline operations, and reduce costs based on the trust we have built with users. Through this, we are developing activities that contribute to society by providing the products and engineering capabilities we have cultivated so far to everyone. Alongside the sale of products related to IoT, manufacturing DX, and on-site monitoring/condition monitoring, we will focus on custom orders, customization, and system construction to realize your ideas. We encourage you to consider utilizing our services. https://eng.power.mhi.com
![[Data] Data diodes provide cybersecurity for substations.](https://image.mono.ipros.com/public/product/image/2050212/IPROS1060237848567759815.jpg?w=280&h=280)
![[Information] Latest Trends and Examples of Data Diodes](https://image.mono.ipros.com/public/product/image/2050212/IPROS14803315463455232258.jpg?w=280&h=280)
