Honeywell's analysis focuses exclusively on USB security in industrial control environments, which it claims is the first of its kind. It highlights that removable USB media such as flash drives pose a significant - and targeted - threat to cyber security. The data on which the 'Honeywell Industrial USB Threat Report' is based comes from 50 customer sites.

In 44% of the companies surveyed, at least one file that would have caused a security problem was detected and averted on the USB sticks used. 26% of the threats detected had the potential to cause significant disruption, where operators would no longer have been able to visualize the process and manage their operations. Around 1/6 of the attacks were directly targeted at industrial control systems or Internet of Things (IoT) devices.

"The data shows significantly stronger threats than previously assumed. Overall, the results show that many of these attacks were targeted and intentional," said Eric Knapp, Director of Strategic Innovation, Honeywell Industrial Cyber Security. "This research confirms what we have suspected for many years - USBs are a real threat to industrial organizations. What's most surprising is the scope and scale of the threats, many of which can lead to serious and dangerous situations in plants with industrial processes."

The threats in detail

The data analyzed was captured by Honeywell's Secure Media Exchange (SMX) technology, which is specifically designed to scan and encrypt removable media, including USB drives. Threats detected included sophisticated and long-known types such as Triton and Mirai, as well as variants of Stuxnet, a type of attack originally used by nation states to disrupt industrial operations. Comparative tests showed that up to 11% of the threats detected would not have been reliably detected by traditional protection technologies. "This data underscores the need for advanced systems to detect such threats," said Knapp. The Honeywell Industrial USB Threat Report recommends a combination of employee training, process adjustments and technical solutions to reduce the risk of exposure to USBs in industrial facilities.