Managing and Protecting Boundaries During a Cyber Conflict
You can download the Cyber Front Dashboard from our Help Desk Portal (Also attached to this KB)
Cyber Front Dashboard
Create New Dashboard
Rename to: Cyber Conflict Risk
Create Current Traffic Widgets for;
Sensors Widgets
Conflict Countries Sensor
Conflict Business Sensor
Country Widgets
Russia
China
Belarus
Iran
North Korea
Armenia
Kazakhstan
Azerbaijan
Kyrgyzstan
Tajikistan
Seychelles
Isle of Man
Venezuela
Context Groups for Targeted Defense
You can download these Context Groups from our Help Desk Portal (Also attached to this KB)
Countries
These countries have been identified as potential actors or contributors to the cyber conflict.
Create New Country Context Group
Add The following Countries
Russia
China
Belarus
Iran
North Korea
Armenia
Kazakhstan
Azerbaijan
Kyrgyzstan
Tajikistan
Seychelles
Venezuela
Isle of Man
Context Groups: Businesses
- We recommend that a Sensor is created to log only and a disabled Custom Rule to block in the event of an emergency.
Once you have download and imported the Cyber Front Dashboard and Conflict Country and Conflict Business Context Groups from our Help desk portal (Both attached to this KB). Create the following Sensor
Creating Conflict Country Sensor
Go to Traffic Control
Add New Sensor
Name the Sensor: Conflict Country
In the Source Geo IP/ Context
Select Context group
Select Conflict Country
Click Save
Creating Conflict Business Sensor
Go to Traffic Control
Add New Sensor
Name the Sensor: Conflict Business
In the Source Geo IP/ Context
Select Context group
Select Conflict Country
Click Save
Once you have created the Sensor, go to your new Cyber Front dashboard and edit the Conflict Country and Conflict Business widget to ensure it is displaying the correct sensor details;
Go to the Conflict Widget
Click gear
Under sensor make sure the correct Sensor is selected.
Strategic Monitoring and Blocking
- For countries potentially involved in cyber conflicts, we advise setting up a Sensor configured for logging purposes and a Custom Rule, initially disabled, ready to block traffic in emergency situations.
- Regarding businesses within conflict areas, PacketViper has identified 245 entities with registered network spaces that, albeit unintentionally, may become vectors in cyber warfare. A context group encompassing these businesses has been created to facilitate monitoring. Similar to the country-based strategy, we recommend configuring a Sensor for logging and preparing a Custom Rule for potential blocking.
Implementing the Cyber Front Strategy
- Deploy the dedicated dashboard to maintain visibility over potentially compromised regions and entities.
- Utilize the context groups with Sensors and Custom Rules to proactively manage traffic from these areas, providing a balanced approach between awareness and readiness for immediate action if necessary.
- Stay informed and agile, as the landscape of cyber conflict is ever-evolving. PacketViper's solutions offer the flexibility to quickly adapt to new threats, ensuring your defenses remain robust against both current and emerging cyber challenges.You can also download the Cyber Front Template and Context Groups below.
Related Articles
PacketViper - Cyber-Physical System (CPS) Comparative Analysis
Overview PacketViper’s analytics and visualization are powered by an AlertBox platform, providing advanced telemetry, behavioral analytics, and compliance visibility. With these capabilities, PacketViper’s autonomous enforcement model eliminates the ...PacketViper’s Cyber-Physical Security Capabilities Whitepaper
PacketViper’s Cyber-Physical Security Capabilities Whitepaper PacketViper’s Integrated Approach to Cyber-Physical Systems (CPS) PacketViper takes an integrated approach to CPS security by bridging physical and digital domains under one autonomous ...Preemptive Cyber Defense - PacketViper's Automated Moving Target Defense for the Future of Cybersecurity
Preemptive Cyber Defense: PacketViper's Automated Moving Target Defense for the Future of Cybersecurity Executive Summary: The Dawn of Preemptive Cyber Defense In the face of an ever-evolving and increasingly sophisticated cyber threat landscape, ...Aligning Electric Utilities with NERC CIP-015-1 Through Preemptive Cyber Defense
Expert Report: Aligning Electric Utilities with NERC CIP-015-1 Through Preemptive Cyber Defense Executive Summary: Bridging the NERC CIP-015-1 Gap with Preemptive Cyber Defense Electric utilities across North America operate within an increasingly ...Technical Brief: Cyber Defense Architecture for Intelligent Traffic Systems (ITS)
Technical Brief: Cyber Defense Architecture for Intelligent Traffic Systems (ITS) For Cybersecurity Professionals and System Integrators Introduction Intelligent Traffic Systems (ITS) present a unique convergence of information technology (IT) and ...