Offline data backup to prevent the escalation of ransomware damage.
One-way communication restriction device Data diode OWCD
In a ransomware attack, backups are destroyed prior to the encryption of the production environment. Can your company prevent this?
In a ransomware attack that takes systems hostage, attackers typically destroy backup data prior to encrypting the production environment to force the payment of a ransom, making recovery difficult. It is essential to avoid this backup destruction attack. In addition to regularly taking snapshots using immutable backup technology, which prevents data from being modified or deleted once written, offline backups that are completely isolated both logically and physically from the production network environment are indispensable. This malware sends captured information to external AI for analysis and modification. By blocking the communication channel to the outside, we can neutralize its movements and protect clean data in a safe location beyond the reach of attackers. The data diode OWCD and file transfer applications perform daily backups of data to storage that is isolated from external communication leaks. The data diode "OWCD" physically restricts communication to one direction only. There are various ways to utilize boundary restrictions. It is beneficial as one of the layers of defense and works well with a zero-trust approach. For inquiries, please refer to the related links below.
Inquire About This Product
basic information
Typically, the communication used in offices involves not only the data you send but also signals that control communication in the reverse direction. We replace this communication with a method that does not require the transmission of control signals in front of the OWCD, making it unidirectional. That signal is communicated through the OWCD and decoded at the exit for your use. Communication control can also be done with firewalls and routers, but the OWCD is free from configuration errors; it is a "restrictive device" that "can only allow flow in one direction" and has no reverse circuit. Signals cannot flow from the opposite direction, effectively shutting out remote control signals emitted by viruses and the theft of files that attackers want to exfiltrate. While reports often highlight the damage to large corporations, about 60% of confirmed ransomware incidents in Japan involve small and medium-sized enterprises. The primary targets are organizations such as manufacturing, healthcare, local governments, and schools, where security personnel are not permanently stationed. There is no need to configure communication restrictions within the "OWCD" itself. Even if regular maintenance cannot be performed, the level of safety will certainly improve. Zero trust dislikes boundary control, but the OWCD, which imposes restrictions, is highly compatible! It is also favorable for micro-segmentation. For inquiries, please refer to the related links above.
Price information
The features introduced here are realized by software running on a processing PC separately prepared for the core products, OWCD-2 with a 100MBase-T connection and OWCD-G with a 1000MBase-T connection. The damage caused by ransomware is more severe the deeper it is rooted. The cost of intrusion is 66,000 yen, and recovery costs 230 million yen, making it a "sustainable business." Zero trust is a cat-and-mouse game, and the operational costs are enormous. While the initial investment may be high, the reduction in lifecycle costs is significant. For inquiries, please refer to the related link above.
Delivery Time
※Please contact us for pricing. You can find related links above.
Applications/Examples of results
Over 150 units sold to date. We have numerous achievements in remote monitoring of thermal power plants. While I can't discuss specifics, the utilization in critical infrastructure such as government agencies, public institutions, transportation, and important sectors within companies (like critical infrastructure and research facilities) is steadily increasing. Digital transformation (DX) brings convenience but also structurally increases the "risk of stopping." The "zero trust" concept often mentioned in discussions arises from the idea that no one can be trusted, leading to a focus on authentication. However, this implies a system based on connectivity. In critical infrastructure, there is a demand for "no external connections," making zero trust alone inadequate; restrictions at the boundaries are essential. No single method can ensure complete security. It is crucial to combine various defense measures in a layered approach. In addition to the methods introduced this time, there is a growing trend to completely separate incoming communications from an unspecified number of external sources and outgoing communications to specific destinations to prevent the infiltration of information-gathering malware, as well as to ensure the prevention of intrusions from remote maintenance lines. The use of unique solutions provided by system integrators (SIers) is also rapidly increasing! For inquiries, please visit the related links above.
catalog(2)
Download All CatalogsCompany information
Our company is a member of the Mitsubishi Heavy Industries Group, serving as a design technology partner for Mitsubishi Heavy Industries, where we engage in planning and mechanical design for prime movers (steam turbines/boilers, gas turbines, water turbines), pumps, and various plants, as well as instrumentation control system planning and electrical design. In order to meet the increasingly diverse and sophisticated needs of our customers, we will continue to challenge ourselves to improve our technological capabilities, streamline operations, and reduce costs based on the trust we have built with users. Through this, we are developing activities that contribute to society by providing the products and engineering capabilities we have cultivated so far to everyone. Alongside the sale of products related to IoT, manufacturing DX, and on-site monitoring/condition monitoring, we will focus on custom orders, customization, and system construction to realize your ideas. We encourage you to consider utilizing our services. https://eng.power.mhi.com







