OPSWAT Eliminates $1M/Hour Downtime for the World’s 3rd Largest Semiconductor Manufacturer

Most of our daily lives depends on microscopic electronic components functioning exactly as intended; phone alarms, traffic lights, banking systems, hospital devices, data centers, mobile networks, industrial machinery, and AI services are all powered by semiconductors, which can become single points of failure for virtually anyone.

Even if it’s part of the world’s Critical Infrastructure, this technology is so inconspicuous that people rarely notice this technology. That is, until something breaks.

The red flag in the semiconductor manufacturing industry lies in how highly concentrated and systemically fragile it is. Only a very small number of companies, like TSMC, Samsung Electronics, and Intel produce the vast majority of the world’s most advanced chips. This creates supply-chain concentration risk, where disruptions at a single point can trickle down and impact economies and consumers worldwide.

We already saw a version of this during the global chips shortage in the automotive sector after COVID-19. As automobiles became harder to manufacture, prices rose, ultimately passing the additional costs onto consumers. Resulting annual worldwide production losses were estimated at $110 billion by May 2021.

The post-COVID chip shortage became a wake-up call for the US Government, prompting them to offer incentives for the major manufacturers (raising up to $50 billion for Intel) to set up US-based factories, turning semiconductors into geopolitical assets.

So, we have a small but essential technology powering modern life, concentrated in a few manufacturers, and heavily backed by government investments. Now layer cyberattacks onto this already fragile system, and you can see how the dependency becomes a critical cyber vulnerability.

Our customer, the world’s third-largest semiconductor manufacturer with over 100,000 employees across six continents and annual production exceeding 2.5 million GPUs, was an obvious, high-value target for attackers. Yet the organizations could not simply overhaul its entire infrastructure or air-gap its manufacturing facilities to eliminate vulnerabilities.

Their core challenge was: how can we safely move critical data into and out of highly sensitive manufacturing environments without accidentally opening an attack path into these environments?

That is where OPSWAT and its technologies come in. The customer deployed MetaDefender Managed File Transfer and MetaDefender Optical Diode solutions to enable secure, controlled file movement while eliminating pathways for intrusion into production systems.

Here’s how it went.

In an environment like our customer’s, data must move freely between suppliers, contractors, engineers, production systems, and corporate IT systems.

The conundrum is how to create an efficient flow while maintaining strict controls, and ensuring that only authorized entities could transfer data, and that only clean data could travel through approved security pathways.

File security policies were in place, but they had to be changed, out of various reasons:

• The company’s PLC (Programmable Logic Controllers) systems were highly vulnerable to cyberattacks delivered via file transfers.

• Consequently, PLCs became a vulnerability in themselves, as one compromised PLC could become a pathway to more secure networks.

• Existing file security checks generated $1 million in lost revenue for every hour of downtime due to wait times.

• There was no control over file transfers which meant file movement and contractor access could not be audited.

• The customer could not see who transferred files, where the files went, or whether sensitive data was leaving the organization unauthorized.

The MetaDefender Optical Diode supports controlled file transfers across security boundaries by physically enforcing a unidirectional optical connection. Critical Infrastructure organizations use OPAWAT’s diodes to achieve strong network isolation while sharing critical operational data.

The MFT-to-MFT architecture creates a controlled, secure bridge between external parties, OT, and IT systems, while protecting inbound files from malware and outbound files from data leaks.

With both MetaDefender Managed File Transfer and the MetaDefender Optical Diode in place, our customer:

• achieved significant improvements in productivity and security, eliminating vulnerabilities, and protecting their OT infrastructure,

• enabled seamless, secure file transfers between multiple sites,

• allowed continuous operations, eliminating expensive downtime,

• and created a new culture of cybersecurity awareness across 10 production plants, dramatically increasing the organization’s cybersecurity footprint.