Search
  • Ransomware Protection Storage in the Electric Power Industry

    Ransomware Protection Storage in the Electric Power Industry

    Build the last line of defense for power data security.

  • Overview
  • Benefits
  • Architecture
  • Technologies
  • Products
  • News and Events

Power Data Security Is Fundamental

From generation, transmission, and transformation to distribution, consumption, and dispatching, today's electric power enterprises are in the business of data. Indeed, data has become the core asset of the industry, only heightening the threat of data blackmail to the security and stability of power grids.

  • Energy Safety

    Tampering with key data — from monitoring and warning information to the operational instructions of key nodes — can causepower system faults or major security incidents.
  • Reputational Damage

    The exposure of sensitive information causes damage to an enterprise's reputation.
  • Economic Loss

    According to an IBM report in 2020, the average cost of data breaches in the energy industry is US$6.39 million each incident.
  • Service Interruption

    Malicious encryption of a database paralyzes power company services.

Ransomware Attacks in the Electric Power Industry

Electric power enterprises and infrastructure are the focus of attacks.

The double extortion model increases the risk of data breach.

Ransomware as a Service (RaaS).

The supply chain becomes the main entry point for extortion attacks.

Advanced Persistent Threat (APT)-like ransomware attacks.

The new normal of insecure data.

Architecture

Architecture

Architecture

More Accurate Identification

Added I/O-based and entropy-based storage detection mechanisms, up to 99.9% identification accuracy through the network-storage collabration, cover pre-, in-, and post-event.

Harder to Attack

Building an in-depth system with two lines of defense and six layers of protection, makes IT systems harder to be attacked. The innovative network-storage collabration protection mechanism is updating the network security and storage interception blocklist in real time based on the captured threat file features.

Faster Service Recovery

Huawei storage provides protection actions: snapshot, backup, and Air-GAP. Based on the network-storage collabration recovery mechanism, actions are triggered in advance, greatly reducing the recovery time to the second-level.

Huawei

Key Technologies

E2E Data Encryption

E2E Data Encryption

Protocol-layer encryption NFS, CIFS/SMB.
Advanced Encryption Standard (AES)-256 encryption of production and backup data.
Encryption during air gap replication.
Encryption during remote replication of data and copies.

Air Gap Replication

Air Gap Replication

By setting the replication Service Level Agreement (SLA), data copies are automatically and periodically replicated from the production or backup storage to the isolation environment. The replication link is active only during replication, which ensures data copies are offline most of the time, reducing the possibility of attacks.

File System WORM and Secure Snapshot

File System WORM and Secure Snapshot

A protection period can be set for production or backup data to prevent data modification or deletion during this time range.
Secure snapshots ensure storage data is read-only and cannot be modified or deleted within a specified time range.

Ransomware Detection

Ransomware Detection

A baseline model is established based on historical data to check for any abnormalities in the changed feature values of the metadata of copies.
Abnormal copies are further compared to determine file size changes, entropy values, and similarities.
The Machine Learning (ML) model is used to determine whether file changes are caused by ransomware encryption, flagging them accordingly.

Intelligent threat detection

Intelligent threat detection

The intelligent clustering algorithm prevents brute force cracking. The CDE can detect 100 layers of compression nesting.

Intelligent threat handling

Intelligent threat handling

Network security collaboration restores ransomware attack paths based on threat events, delivers linkage policies, automatically isolates lost hosts, and handles threats in minutes.

Products

OceanProtect Backup Storage

OceanProtect Backup Storage

Offering superb performance, efficient reduction, stability, and reliability, to help users implement efficient data backup and reduce TCO

HiSec Insight Advanced Threat Analytics System

HiSec Insight Advanced Threat Analytics System

Huawei HiSec Insight is designed for threat detection, threat blocking, forensics, source tracing, and threat response and handling, enabling full-process, closed-loop threat handling.

Data Center Management (iMaster DME)

Data Center Management (iMaster DME)

Huawei iMaster DME and iMasterCloud DME IQ deliver automatic, integrated storage lifecycle O&M and management, boasting features such as a one-stop management interface and multi-dimensional intelligent risk prediction and optimization.

All-Flash Storage

All-Flash Storage

OceanStor Dorado All-Flash Storage provides innovative hardware, multi-level reliability, scale-out capabilities, and easy management to accelerate your DX journey.

Scale-Out Storage

Scale-Out Storage

OceanStor Scale-Out Storage provides efficient processing of diverse data and online services to help unlock the value of mass data.

HiSecEngine USG6600E Series AI Firewalls

HiSecEngine USG6600E Series AI Firewalls

Huawei HiSecEngine USG6600E Series AI Firewall are 10GE AI firewalls designed for next-generation data centers. They provide leading security protection capabilities such as proactive defense and border detection.

FireHunter6000 Series Sandbox

FireHunter6000 Series Sandbox

Huawei’s FireHunter6000 series sandbox anti-APT solution provides unknown threat prevention & zero-day attack detection with 99.5% detection accuracy.

TOP