BACnet Security

BACnet Security Issues and How to Mitigate Cyber Risks

BACnet is a commonly used protocol for building automation and operational technology (OT) systems, and is used to establish communication between various devices in a network. Because BACnet-based building systems were originally deployed in isolated (air-gapped) environments, BACnet was not designed with security. Therefore, millions of BACnet devices are lacking common security mechanisms such as…
Read More
BACnet/SC Certificate Management

Improving BACnet/SC Deployment with Automated Certificate Management

Managing BACnet/SC certificates can be a challenging task, especially for large buildings. Just recently at the AHR Expo 2024, we learned of a project that had over 300 devices and the decision was made to use 10-year certificates due to the multiple days (3-4) of labor needed to deploy BACnet/SC certificates. The owners didn’t want…
Read More
BACnet MS/TP Security Risks

BACnet MS/TP Security Risks and Vulnerabilities

What is BACnet MS/TP? BACnet MS/TP (Master-Slave/Token-Passing) is a widely used communication protocol in building automation and control systems. BACnet MS/TP is implemented with a shared bus and one or more building control devices daisy-chained along the wiring from a controller or a BACnet IP router/gateway. BACnet MS/TP Scalability The maximum number of BACnet MS/TP…
Read More
Smart Building Cybersecurity

Smart Building Cybersecurity Best Practices

Understanding Smart Buildings Smart Buildings are structures equipped with a network of interconnected devices, sensors, and systems that collect and exchange data to optimize various aspects of building operations including operational efficiency, sustainability, occupant comfort and experience. These connected components include heating, ventilation, and air conditioning (HVAC) systems, lighting, access control, elevators, life safety, and…
Read More
AHR Expo 2024

AHR Expo 2024 Event Preview

Veridify Security will be exhibiting at the AHR Expo 2024 in booth S6174. Our demo is getting assembled and being prepared to be shipped to Chicago! Verdify will be exhibiting a live demo of DOME™, a building automation cybersecurity platform that protects both new and existing building automation devices.  The newly revised demo platform will…
Read More
Marconi Hacked 1903

The Hack of Marconi’s 1903 Wireless Demonstration

In the annals of technological history, the year 1903 stands as a pivotal moment in the progression of wireless communication. Guglielmo Marconi, the visionary inventor and pioneer of wireless telegraphy, was set to showcase his groundbreaking technology to the world. Little did he know that this momentous occasion would be marred by an unexpected and…
Read More
Digital Transformation - Operational Technology

Embracing Digital Transformation – Zero Trust with Operational Technology

Embracing Digital Transformation – Zero Trust with Operational Technology Episode #175: In this episode titled “Embracing Digital Transformation – Zero Trust with Operational Technology” by Darren Pulsipher, Chief Solution Architect for Public Sector at Intel, interviews the CEO and Founder of Veridify Security Louis Parks. They discuss the unique problems with Operational technology networks that…
Read More
Zero Trust OT Security

Zero Trust OT Security – Stopping Cyber Attacks on Industrial Control Systems (ICS/OT/SCADA)

Watch this webinar replay of “Zero Trust OT Security – Stopping Cyber Attacks on Industrial Control Systems (ICS /OT/SCADA)” to learn about applying zero trust security at the device level. This webinar addresses the following topics: ICS cybersecurity standards Existing ICS security approaches Zero Trust and device-level implementation Cybersecurity for existing ICS devices Zero Trust…
Read More
Cybersecurity Risk Assessment

How to Conduct a Cybersecurity Risk Assessment for Smart Buildings

As smart buildings are becoming increasingly prevalent, the integration of advanced technologies into the infrastructure of these structures introduces a myriad of cybersecurity risks. Conducting a comprehensive cybersecurity risk assessment is imperative to identify potential threats, vulnerabilities, and safeguard the integrity of smart building systems. This blog post will explore key steps and considerations involved…
Read More

Cybersecurity Awareness Month 2023

  October is Cybersecurity Awareness Month 2023 Cybersecurity Awareness Month 2023 is a collaboration between government and private industry to raise awareness about digital security and empower everyone to protect their personal data from digital forms of crime. The Cybersecurity and Infrastructure Agency (CISA) and the National Cybersecurity Alliance partner to create resources and communications…
Read More

Archives