Site Search

From "Detection" to "Action" - DeviceTotal's role in strengthening OT visualization solutions in Japan

This article is a translation of a white paper written by DeviceTotal. It covers major trends in the Japanese OT security market, such as MITSUBISHI ELECTRIC Corporation 's acquisition of Nozomi Networks, and explores the limitations of visualization solutions and the expanded functionality offered by DeviceTotal, with specific examples. It explains practical approaches required in the field, from device lifecycle management and official vulnerability information from manufacturers to actionable countermeasures.

We hope that this article will be helpful to all OT security personnel, including those in the manufacturing and critical infrastructure industries, in managing risks and strengthening countermeasures in their companies.

Introduction

MITSUBISHI ELECTRIC Corporation 's acquisition of Nozomi Networks demonstrates how important OT (Operational Technology) and IoT security is in Japan. While OT visibility solutions like Nozomi provide detection capabilities, Japanese organizations require accurate and up-to-date security status of every device on their network, visibility into its lifecycle, vulnerability information confirmed by device manufacturers, and actionable mitigation measures.

DeviceTotal brings significant value in this area, transforming detection into action with device information for all Japanese manufacturers and continuously updated intelligence.

What OT visualization solutions are missing

Lifecycle Visualization

  • OT visibility solutions can detect devices but do not track their lifecycle, including EOS (end of sale, end of support), EOL, etc.
  • DeviceTotal helps you avoid the use of end-of-life devices that are prohibited in highly regulated industries.

Accurate vulnerability matching

  • OT visibility solutions refer to external vulnerability databases, but do not check vulnerabilities against manufacturer announcements.
  • DeviceTotal provides the accuracy of manufacturer vulnerability information, eliminating false positives and missed detections.

Patch and Workaround Intelligence

  • While OT visibility solutions can identify vulnerable devices, they do not provide specific guidance on countermeasures.
  • DeviceTotal provides the latest secure firmware information, workarounds (other than patches) provided by device manufacturers, and prioritized responses.

Dealing with Japanese manufacturers

  • Many domestic manufacturers do not provide information to global databases such as NVD, creating a significant risk of oversight.
  • DeviceTotal covers all Japanese manufacturers, including NEC, Hitachi, Yokogawa Electric Corporation, Omron, Panasonic, Fujitsu, and more.

Beyond network detection

  • In many environments, OT visibility solutions lack full network coverage, creating a problem of undiscovered devices.
  • DeviceTotal allows customers to add devices manually, import them via file upload, or import them from another IDS.

Enhanced OT visualization solutions using DeviceTotal

  • Adding a layer of intelligence:
    Extends OT visibility solution detection information with device-level security information and actions.
  • Compatible with all devices and manufacturers:
    Compatible with all domestic manufacturers and devices.
  • Daily Updates:
    Continually strengthening information based on manufacturer advisories and CVE announcements.
  • Regulatory compliance assistance:
    It provides the vulnerability visibility and remediation lifecycle required for an OT/IoT security framework.
  • Pre-purchase evaluation:
    Reduce supply chain risk by evaluating devices before purchase.
  • No additional installation required:
    Seamless integration with data from OT visualization solutions and IDS feed information, etc. No additional infrastructure construction required.

Value provided to Japanese companies

  • Comprehensive risk management:
    From detection to mitigation, OT visibility solutions find the problem and DeviceTotal recommends next actions.
  • Complete coverage of domestic vendors:
    It covers all devices made by Japanese manufacturers and monitors the entire environment.
  • Regulatory and compliance support:
    Comply with key Japanese regulations (METI, IPA, industry-specific regulatory frameworks) and help eliminate end-of-life devices.
  • Reduced operational costs:
    Optimize patch management with step-by-step instructions and vendor-specific workarounds.
  • Validating security investments:
    Updated daily from manufacturer information and the CVE database, risk information is always up to date.

Customer adoption examples

  • OT visibility solutions detect:
    • Hitachi industrial router detects abnormal network communications
  • Additional information from DeviceTotal:
    • The router is no longer supported.
    • Exploitable critical CVEs
    • The manufacturer has provided corrected firmware.
    • Provides information on available workarounds before upgrading
    • Daily updates with new advisories
    • Clear visibility into risk reduction for devices and organizations through updates
  • Customer Results:
    • Clear risk mitigation decisions
    • Presenting evidence for regulatory audits
    • Reduced downtime and operational risks

Summary

OT visualization solutions provide "detection," while DeviceTotal links the visualization results to "concrete countermeasures."

By adding DeviceTotal to their OT visibility solutions, Japanese organizations can achieve the following benefits:

  • Covering all Japanese manufacturers
  • Accurate, manufacturer-approved vulnerability intelligence
  • Patch and mitigation guidance and priority actions to take
  • Clarifying the risk reduction effect on devices and the entire organization
  • Daily updates on all manufacturers and CVEs
  • Rapid response to Japanese regulatory framework
  • Detect devices that OT visibility solutions can't detect

The OT visualization solution + DeviceTotal will comprehensively resolve Japan's OT/IoT security issues well into the future.