Resolving the CPS Identity Crisis

Cyber-physical system (CPS) asset information is as diverse as the original equipment manufacturers (OEMs) and medical device manufacturers (MDMs) supplying these critical systems. And while each OEM and MDM has a well-structured way of identifying assets in the physical world, the same isn’t true for naming conventions in the cyber realm. 

Inconsistencies stemming from different collection methods or protocols can leave security teams having to manually infer which assets may be exposed to which vulnerabilities. The risk for partial matching related to CVE attribution is real, impairing a team’s ability to accurately assess cyber risk in their environments. 

This report examines the nuances of asset visibility and their impact on overall CPS protection. We break down the core challenges to CPS asset identification, and then discuss how Claroty’s CPS Library, an AI-driven approach to device information mapping, dramatically improves this aspect of asset visibility.