Equip - Fall 2016 - 9


Consider this: In 2015, 60 Minutes showed
how researchers were able to hack a smart car and
take control over the car. Imagine if that could
happen with one of your buses, if it could be disabled from afar while driving along the highway.
Here is an even more bizarre example: Security researchers have created techniques for hacking a smart thermostat and turning it into a smart
spy, according to Computerworld. Even the innocent and humble thermostat in your company's
hallway could be a menace. Strange but true.
Just as a computer system can be compromised due to a lack of standards, turning it into a
cyber-threat to others, smart technology can as
well. Adversaries will leverage the smart technology for their financial gains and attack other
potential victims.
What can your company do about these mindbending possible threats? Take a look under the
hood, so to speak, at these specific areas:

Be Prepared
A WEALTH OF CYBERSECURITY RESOURCES MAY BE FOUND ONLINE.
HERE ARE EXCELLENT PLACES TO START:
Surface Transportation Cybersecurity Toolkit: www.tsa.gov/for-industry
/surface-transportation-cybersecurity-toolkit
National Institute of Standards and Technology Cybersecurity Framework: www.nist.gov
/cyberframework
Homeland Security Toolkit: www.dhs.gov/publication/stopthinkconnect-industry-resources
Better Business Bureau: 5 Steps to Better Business Cybersecurity: www.bbb.org/council
/for-businesses/cybersecurity
You can also sign up for timely cybersecurity updates from Homeland Security at www.us-cert.gov/ais.

latest firmware version. If necessary, upgrade
the firmware.
* Firewall protection: Smart technology
should be protected by the network's firewall.
* Systems check: Contact the manufacturers * Network segmentation: Install smart
of your motorcoaches and electronic logging detechnology on an isolated network segment
vices and fleet management systems. Ask them
separate from the company's network to limit
to explain how the technologies they use ensure
an intrusion.
the security of your vehicles.
* Restrict access: Limit access to those who
need it.
* Default account password: Change the
smart technology's administrator account
* Two-factor authentication: Authenticate
password frequently.
a user's access to the network by requiring
two steps (similar to when a bank asks for a
* Firmware version: Check with your softpassword and an authentication code).
ware's manufacturer to see if you've installed its

Like-New Setra Sale!
Own a Ready-to-Roll, Pre-Owned Setra S 417
with Setra Select+ Warranty, Service and More!

* Log network traffic: Capture and store all

network traffic events on a central logging system
so you that can review past activity.
* Continuous monitoring: Monitor the central
logging system for any suspicious activity. ●
John Essner is a senior manager at New York
City-based MSA Security, a provider of high
consequence threat protection since 1987. Its cyber-
security services include network monitoring, inci-
dent response, digital forensics, penetration testing,
and vulnerability assessments. To learn more,
contact Phil Marino at pmarino@msasecurity.net
or (212) 509-1336, x297.

Let the excellence and precision of Daimler's
German engineering and interior ambience
delight your passengers for years to come.
Contact us today.
New Jersey
Walter Sturdivant
(609) 876-3713

Illinois
Bob Dethloff
(847) 867-5191

CANADA
Guy Charron
(514) 240-8448

Randy Wilcox
(609) 876-3711

California
Marshall Deems
(818) 519-7193

Guy Tessier
(204) 771-8271

Texas
Brian Hill
(214) 725-0490

Florida
Janet Cathey
(678) 472-1743

For limited warranty information, visit
mcicoach.com/preowned

The luxury coach your fleet's been looking for.
MCI's all new Setra Select+ program offers you pre-owned Setra
TopClass S 417 coaches at substantial savings. This select group of
coaches are ready to roll and come with:
* 210+ point inspection
* MCI 60-day/ 30,000 mile limited warranty

ON
SALE!
NOW

* Four additional months of extended coverage on brakes, electrical
system and more (excluding engines, transmission, batteries and tires)
* Two free express oil and filter service visits, and 10,000-mile preventive
maintenance service at any six MCI Service Center locations
* Free, three-day Setra technical training for one of your technicians at
MCI's Louisville, KY, training center, and 24/7 access to Setra-trained
MCI field support.

MCI Setra Select ad_Equip.indd 1

A New Flyer company
Motor Coach Industries · 200 East Oakton Street · Des Plaines, IL 60018
Phone 866.624.262 · www.setra-coaches.com
Distributor of EvoBus GmbH for Setra buses and Setra parts in the United States and Canada.

9

9/14/16 2:56 PM
EQUIP MAGAZINE // Fall 2016


http://www.tsa.gov/for-industry /surface-transportation-cybersecurity-toolkit http://www.tsa.gov/for-industry /surface-transportation-cybersecurity-toolkit http://www.nist.gov/cyberframework http://www.nist.gov/cyberframework http://www.dhs.gov/publication/stopthinkconnect-industry-resources http://www.bbb.org/council /for-businesses/cybersecurity http://www.bbb.org/council /for-businesses/cybersecurity http://www.us-cert.gov/ais http://www.mcicoach.com/preowned http://www.setra-coaches.com

Table of Contents for the Digital Edition of Equip - Fall 2016

Inside
Equip - Fall 2016 - Inside
Equip - Fall 2016 - 2
Equip - Fall 2016 - 3
Equip - Fall 2016 - 4
Equip - Fall 2016 - 5
Equip - Fall 2016 - 6
Equip - Fall 2016 - 7
Equip - Fall 2016 - 8
Equip - Fall 2016 - 9
Equip - Fall 2016 - 10
Equip - Fall 2016 - 11
Equip - Fall 2016 - 12
Equip - Fall 2016 - 13
Equip - Fall 2016 - 14
Equip - Fall 2016 - 15
Equip - Fall 2016 - 16
Equip - Fall 2016 - 17
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2016fall
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2016summer
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2016spring
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2016winter
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2015fall
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2015summer
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2015spring
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2015winter
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2014fall
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2014summer
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2014spring
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2014winter
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2013fall
https://www.nxtbook.com/nxtbooks/pohlyco/equip_2013summer
https://www.nxtbookmedia.com