Dear %%if(%%firstname%% is empty,Colleague,%%firstname%%)%%:
To receive the latest automation information, add enews@automation.com to your address book.
Read the online version if links don't work in this Security Update. |
| |
June 2008 |
Sponsor: Honeywell |
Honeywell ensures site security
Honeywell has a broad range of solutions to ensure site security. We seamlessly integrate security with process control, building management and HR systems for greater efficiency and plant reliability. An integrated and centrally managed security solution results in faster, proactive responses to alarms and events and less expensive implementation and reduced maintenance costs. Critical alarms can now be shared between security and the control room, so everyone has a single, real-time view to any potential threat.
Learn more.
|
Sponsor: Byres Security |
Make Security Easy: Tofino™ provides safe and understandable security for both new and legacy control systems - plug Tofino™ into your network and it learns what types of devices it needs to protect, looks up those device's vulnerabilities in a central database and then tunes its firewall to secure your control system.
Click here for more information.
|
|
|
| Featured Articles |
Network security for device servers
By Sena Technologies
Device servers deliver the appropriate network connection and physical interface for industrial device applications. Providing this function in a secure fashion is becoming a major concern for industrial IT managers as burgeoning numbers of industrial devices receive a real or proxy Ethernet connections. Security-related features have become one of the main factors in device server selection.
Peril in the pipeline
InTech, June 2008
By Marshall Abrams and Joe Weiss
Cyber security often focuses on the vulnerabilities of commercial off-the-shelf software and Internet access, with malicious activity as the primary concern. But more discussion is needed about control system cyber security and how its policies and countermeasures can potentially preclude or minimize the impacts of a control system cyber security event.
Quantifying Cyber Security Risk Part 2
Control Engineering, May 2008
By Morgan Henrie, Univ of Alaska, and Paul Liddell, Alyeska Pipeline
Each company has to balance the risk of a potential SCADA cyber security event, the effects an event could have on the company, its customers, and other stakeholders, as well as the cost of a cyber security mitigation program. The hardest step in the design and deployment of the overall risk mitigation strategy is quantifying the risk.
Consider the Consequences of a Cyberattack
Industrial Networking, May 2008
By John Rezabek, ISP Corp.
One only can assume that fear of bad press must keep most victims from publicizing or revealing any successful cyberattack. Reports of serious breaches in industry still seem to be few and far between.
That we are vulnerable is hard to deny.
Combining Cyber and Physical Security
Control Engineering, April 2008
By Frank Madren, GarrettCom
Security technologies developed in electric utility applications are spreading into broader use. IP based video extends functionality of Ethernet infrastructure.
|
Browse these and more articles and white papers on the Security portal.
|
| Resources & Literature |
Honeywell Launches Security Channel Website
Security Channel Web site features videos that showcase the newest security technologies, introduce viewers to leading industry personalities and examine real-world security projects. Video case studies demonstrate the application of video surveillance, access control, visitor management and intrusion systems.
|
Browse these and more resources and literature on the Security portal.
| | Application Stories |
Securing Redundant Communications between an ESD and a Honeywell DCS
By Eric Byres, Tofino
Describes how a petroleum refinery used the Tofino Industrial Security Solution to provide secure communications between a Triconex Emergency Shutdown (ESD) system and a Honeywell Experion process control system. It also explains the use of the Tofino system in redundant networks, techniques for grouping large numbers of identical devices in "networks" and the management of nuisance alarms generated by unwanted multicast traffic.
Safety Interlocks Protect Employees at JRI
Process & Control Today, May 2008
JRI wanted to protect a plasma torch, which could expose workers to potential danger should the plasma torch power up when the door is open for a tool change. Fortress designed a safety system using a voltage-switching unit and safety interlocks. Only when the voltage of the machine measures zero can the vacuum vessel grant access.
Plant Safety
Chem.Info, May 2008
By Nato Flores
Building a chemical plant, with its inherent safety and environmental requirements, can be particularly formidable. Huntsman, a global manufacturer and marketer of differentiated chemicals, and Tower General Contractors, a construction firm in Los Angeles, can attest to that.
Siemens tracks energy provider’s nuclear materials
Process & Control Today, April 2008
Siemens implemented a SIMATIC IT MES to track and trace all nuclear materials produced by British Energy. BE needed a new Nuclear Materials Accountancy System that would allow them to catalogue and locate nuclear material in accordance with the European Commission Safeguards Regulation No 302/2005.
Condition monitoring system prevents downtime at nuclear plant
Process & Control Today, April 2008
A FAG VibroCheck remote condition monitoring system is helping E.ON Kernkraft’s nuclear power plant in Grafenrheinfeld, Germany, monitor more than 90 electric motors, pumps and fans, providing early warning of impending failures and helping to keep plant availability above 90 per cent.
|
Browse these and more application stories on the Security portal. |
| Featured Training |
Security Engineering for Industrial Automation Systems
September 3-5, 2008 Research Triangle Park, NC
Using open standards such as Ethernet and web technologies in SCADA and process control networks exposes systems to cyber attacks. This course provides a detailed look at the security principles that can be deployed in protecting critical control systems.
How to Design IEC 61508-Compliant Hardware and Software
September 22-25, 2008 Natick, MA
Seminar covers safety engineering, IEC 61508 requirements, functional safety management, E/E/PES requirements, case studies, examples, and tools.
Online: Cyber Security for automation, Control & SCADA Systems
September 22 to November 14, 2008
This CyberU course runs for seven (7) weeks. Your course syllabus will guide you through the course modules, provide assignments, and the schedule for live Q & A sessions. Price: $1195.
OPC Training Seminars
The OPC Foundation and its sponsoring members will host a series of eight one-day training seminars. These free seminars are tailored for end-users, systems integrators and OEMs, and are designed to cover the fundamentals of OPC including Servers, Clients, OPC Data Access, OPC Unified Architecture, Best Practices and Compliance.
|
Browse these and more training and seminar opportunities on the Security portal. |
| Product Announcements | | |
Browse these and more Product Announcements on the Security portal.
Search all Products by keyword, category, manufacturer or release date. | | Company & Organizational News |
Core Security Technologies discovers vulnerability in Citect SCADA software
An attacker could use the vulnerability to gain remote, unauthenticated access to a host system running CitectSCADA.
New Life for Industrial Security Incident Database
Automation World, May 2008
By Wes Iversen
The Industrial Security Incident Database (ISID) is coming back to life.
Bryan Singer of Wurldtech named to NERC Cyber-Security Team
As the federally designated Electric Reliability Organization (ERO) in the United States, NERC develops and enforces reliability standards for the planning and operation of the bulk power system.
Phoenix Contact acquires Innominate
Phoenix Contact is the new owner of Innominate Security Technologies, a provider of embedded security devices in industrial applications worldwide.
Innominate joins Industrial Defender program
The program enables technology companies in the process control/SCADA market to provide their customers with integrated Defense in Depth cyber security solutions.
|
Browse these and more company and organizational news on the Security portal. |
| Application News |
Yokogawa selects Tofino for industrial firewall
The CENTUM; CS 3000 Production Control System and STARDOM Network-based Control System will use the Tofino Industrial Security Solution.
Robotics company chooses Fortress to safeguard operators
Process & Control Today, June 2008
ATM Automation has chosen Fortress Interlocks to safeguard workers at its Robotics manufacturing plant in Blaby, Leicestershire. Fortress’ eGard interlocks protect a robot cell. When an operator wants to gain access he must turn and remove the key from the unit holding the door closed.
Matrikon to provide cyber security for industrial plant
The process control and IT network security cyber security solution is is based on industrial best practices as outlined by ISA, NERC and NPRA.
RTI to protect USAF Distributed Systems
The project, “Proactive Determination of Networked Node Vulnerability,” will seek out weaknesses in network security before and during a security intrusion event.
|
| Browse these and more application news on the Security portal. |
| Featured Events |
Emergency Power Supplies Conference
July 23-24, 2008 Brisbane, Australia
This conference is an industry-wide forum to examine and discuss the latest local and international practices and standards in emergency power.
Control System Cyber Security Conference
August 4-7, 2008 Chicago, IL
Latest advancements and issues in securing industrial control systems including: Case studies and recent trends in control system cyber security; IT and Operations issues with securing control systems; SCADA and Control System procurement issues; End-user cyber security experience with control system architectures and technologies; and more.
ASIS International 2008
September 15-18, 2008 Atlanta, GA
ASIS 2008 is the recognized world leader in providing security professionals like you with the resources you need to get the upper hand.
ISA Expo
October 14-16, 2008 Houston, Texas
Organized around six core automation and control themes, ISA EXPO 2007 provides attendees a content-rich environment that offers unlimited opportunity for exploration of key technologies, professional growth, and interaction with like minded professionals.
|
Browse more industry events on the Security portal.
Add an event to our calendar. |
I hope you enjoyed this Security update. If you have any comments or suggestions regarding the content in this e-newsletter or on Automation.com, please don't hesitate to contact me.
Rick Zabel
Vice President, Publisher
Automation.com View our Privacy Policy For editorial inquiries, please contact Rick Zabel
For advertising inquiries, please contact Karen Olson or see our Media Kit. |
|
|
