Red Team in a Box for Embedded and Non-IP Devices

Cyber threats pose a significant risk to Industrial Control Systems (ICS) utilized in a number of different environments. Many ICS devices are embedded devices which are not directly addressable over standard remote connection means (e.g. TCP/IP), may be updated and patched less frequently than non-ICS devices, and may have been designed and implemented largely without consideration for cyber security. IDT’s Cyber Red-team Automated Firmware Tester (CRAFT) enables revolutionary cyber-physical security analysis and reporting through an innovative vulnerability detection process. CRAFT will be deployed on a tablet device alongside numerous cables designed to connect to the tablet on one end and a target embedded (Non-IP) device on the other. CRAFT will not only find critical vulnerabilities but report them in an insightful and meaningful way to an operator, so that action can be taken to remediate them. IDT envisions CRAFT deployed on shipboard and dockside environments, enabling fast and secure analysis of the plethora of non-IP embedded devices critical to ship and industrial infrastructure systems.