Dear %%if(%%firstname%% is empty,Colleague,%%firstname%%)%%:
To receive the latest automation information, add enews@automation.com to your address book.
Read the online version if links don't work in this Security Update.
Security Update from Automation.com
February 2009
Sponsor: Honeywell

Honeywell Process Solutions

Honeywell's Security Solutions

As a global leader in both security and process control technology and as an operator of our own chemical plants, Honeywell is uniquely qualified to provide security for industrial plants. Our integrated solutions include access control, perimeter detection, video surveillance and command and control and are designed to protect your plant, processes and employees. Our solutions can be scaled for sites of all sizes and will help you meet regulatory requirements.

More information on Honeywell's Security Solutions

View Maritime Security White Paper

 

 

Visit our Automation Portals

Our Automation Portals organize information on various topics and include content published on Automation.com as well as other industry websites. Each portal includes new products, company news, articles, white papers, application stories, training, resources, events, and more.

Visit these one-stop sites for all your automation information

 

 

Live News Feed
In this Issue
>> Featured Articles
>> Product Announcements
>> White Papers
>> Resources & Literature
>> Application Stories
>> Featured Training
>> Company News
>> Project News
>> Featured Events
image
Featured Articles

Embracing Wireless Technology for Industrial Automation
Sensors, January 2009
By Arun Veeramani, National Instruments
The key to getting plantwide real-time data is communication between the machines on the factory floor and the enterprise. As wireless networking has become more commonplace, its performance, reliability, and security has matured to make the technology viable for industrial measurement and monitoring applications.

Cyber Security Hits Home
Control Engineering, January 2009
By Peter Welander
If you’ve been wondering if and when you might be forced to address cyber security issues with your process control or SCADA systems, watch efforts with electric utilities. Implementations going on now could serve as models.

Control Systems and Cyber Security
Control Engineering Europe, December 2008
By Karl Williams, Invensys Process Systems
The security threats and vulnerabilities we see today are wide ranging, often complex, and are not always well understood, particularly what impact if any they may have on an individual system, part of a system, or production facility itself.

Where’s the Remote?
Control Design, December 2008
By Mike Bacidore
Any IT department worth its bandwidth has built a wall of security that keeps its data communications secure and reliable. The conflict arises when IT security must be compromised to accommodate things like remote diagnostics or troubleshooting of machines.

SCADA Systems: Unknown Connections Could Spell Trouble
Power Engineering, November 2008
By Michael Markulec, Lumeta Corp.
The complex designs, interconnected nature and extreme sensitivity of SCADA and other process control systems mandate that utility organizations implement comprehensive plans for assessing and mitigating potential network vulnerabilities and threats. To do this successfully requires development of comprehensive security risk management programs that start with gaining control over network risk.

Browse more articles and white papers on the Security portal.
Product Announcements
  Emerson introduces Ovation Security Center
Ovation Security Center helps power generation customers comply with the North American Electric Reliability Council (NERC) Critical Infrastructure Protection (CIP) standards.
Other Product Announcements

Browse more Product Announcements on the Security portal.

Search all Products by keyword, category, manufacturer or release date.

White Papers

Meeting NERC Change Control Requirements for HMI/SCADA and Control Systems
By GE Fanuc
NERC’s standards for Critical Infrastructure Protection (CIP) apply to various critical assets, and this paper demonstrates how Change Control principles can help protect two specific asset types: SCADA and control systems.

Tunneling Process Data Securely Through Firewalls
By Integration Objects
12-page paper describes OPCNet Broker software, which employs the OPC communication standard without the need for DCOM. The technology increases the security of data and the overall usability of the solution.

What You Don’t Have Can’t Leak, or Be Blown Up by Terrorists
By Center for American Progress
Current chemical security efforts are inadequate to protect workplaces and communities from a terrorist attack. Here’s a list of the top 101 most dangerous facilities, and what a chemical security program can do about it.

Investment & Security: Key Challenges to Industrial Ethernet Systems
By Larry Winchester, Ethernet Direct
The saying “You get what you pay” has some subtleties that should be considered when comparing industrial switches. Here are five key areas that you should be careful to understand when choosing an Ethernet Switch.

IT Security in Production
By Torsten Rössel, Innominate Security Technologies
Machinery and production systems are increasingly managed over the worldwide Internet via Ethernet. Security is obviously of critical importance throughout the network. But Enterprise networking and common network interfaces are potentially more vulnerable than ever.

Browse more white papers on the Security portal.

Resources & Literature

TUV creates web site compliance library
Website provides access to thousands of active certifications issued by TÜVRheinland. Certificates are translated in a dozen languages.

Journal of Information Warfare
A primary resource for professionals with an interest in Information Warfare (Information Operations) from the military, government, industry, and education. Published three times a year in both traditional hard copy and as benefits the topic, in electronic format via the web site.

Browse more resources and literature on the Security portal.

Application Stories

SCADA system controls Port of Gothenburg
Process & Control Today, December 2008
In Sweden, a CitectSCADA system controls and monitors all of Port of Gothenburg’s multiple control, alarm, energy, security, and loading/unloading functions.

Browse more application stories on the Security portal.

Featured Training

Cyber Security for Automation, Control & SCADA Systems
March 23 through May 15, 2009
This course is offered online and utilizes online training modules, additional text materials, online evaluations, and email discussions. Students will have access via email to an instructor and have an opportunity to participate in live Q&A sessions with the instructor and other class participants. Price: $1195

Embedded Systems tutorials
March 30-April 3, 2009 San Jose, California
Free tutorials cover embedded system security, Real-Time Operating System implementation, and "The Worst Embedded Code Ever Written."

Web Seminar: Cyber Security Risk Assessment for Automation Systems
April 1, 2009 2-3 p.m.
Risk Analysis not only identifies security vulnerabilities but also provides the business case for the countermeasures that reduce risk. This seminar introduces the concepts of Risk Analysis and how they are applied to industrial manufacturing and control systems. This seminar is also valuable for IT professionals who wish to learn the special considerations of automation systems in performing Risk Analysis. Price: $225

Web Seminar: Firewalls and Filtering Security on the Plant Floor
Wednesday, 15 April 2009 2:00pm - 3:30pm
The network firewall is one of the most important tools in any cyber-security designer's tool box. This seminar introduces you to the world of firewall system design, focusing on how these devices can be effectively deployed on the typical plant floor. Price $225

Honeywell offers TUV Rheinland security training
Through the TÜV Security Professional Manager training course, plant personnel can gain a better understanding of best practices that can help make their plants more secure.

Browse more training and seminar opportunities on the Security portal.

Company & Organizational News

European WIB Plant Security Working Group appoints Dr. Nate Kube as security expert
Dr. Nate Kube of Wurldtech has been selected to join the European WIB Plant Security Working Group as its industrial cyber security subject matter expert.

Chemical Sector Pursues Cyber Security
Automation World, December 2008
By Wes Iversen
A program under the American Chemistry Council has heightened awareness of cyber threats, while providing cyber security guidance for chemical companies.

Cybersecurity collaboration to deliver advanced control solutions
European Chemical Engineer, December 2008
Wurldtech Security Technologies announced a strategic co-operative agreement with Kenexis Consulting to deliver specialised safety process designs and services to address the evolving cyber risks facing operators of real-time industrial automation systems.

Perry Pederson named to I3P Process Control Security Advisory Board
I3P is a consortium of 27 leading universities, national laboratories and non-profit institutions dedicated to strengthening critical cyber infrastructures.

Honeywell Experion achieves Achilles Level 1 certification  
Wurldtech awarded Honeywell’s Experion Process Knowledge System (PKS) C300 Process Controller Achilles Level 1 Cyber-Security Certification.

Browse more company and organizational news on the Security portal.

Project News

IPS to upgrade DCS at Qatargas  
IPS will upgrade control processors, gateways, local area networks and network security with its Foxboro I/A Series distributed control system Version 8, including mesh architecture.

IPS to automate Nuclear Power Plants in China
IPS will provide simulation, safety and control systems, using Triconex and Foxboro I/A Series, for two new nuclear power plant sites in China. The agreement is worth approximately US $250 million.

ABB selects Achilles Satellite for testing
ABB selected Achilles Security Assurance Platform for testing its Ethernet-enabled control systems.

Honeywell to help protect Woodside's LNG plant
Honeywell will protect Woodside’s Pluto onshore liquefied natural gas (LNG) plant with a sophisticated industrial security system.

Browse more project news on the Security portal.

Add an event to our calendar.

Featured Events

Network & Distributed System Security Symposium
February 8-11, 2009 San Diego, CA
Symposium fosters information exchange among research scientists and practitioners of network and distributed system security services. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation (rather than theory).

International Workshop on Secure Software Engineering
March 16-19, 2009 Fukuoka, Japan
The traditional approach to secure a system includes putting up defense mechanisms like IDS and firewalls, but such measures are no longer sufficient by themselves. This workshop will focus on techniques, experiences and lessons learned for engineering secure and dependable software.

Image Sensors Europe 2009
March 24-26, 2009 London, UK
Addresses the latest trends and technologies within the image sensors industry and the most advanced application areas including security, surveillance, broadcasting, medical equipment, machine vision and automotive.

The Vision Show
March 31-April 2, 2009 Phoenix, AZ
North America’s leading showcase of machine vision and imaging components and solutions. The accompanying conference features practical, real-world training that you can put into practice right away.

SPIE Defense, Security, and Sensing 2009
April 13-17, 2009 Orlando, FL
Includes conferences offering the latest sensing and related technologies for Industrial, Commercial, and Defense applications.

Browse more industry events on the Security portal.

Add an event to our calendar.

I hope you enjoyed this Security update. If you have any comments or suggestions regarding the content in this e-newsletter or on Automation.com, please don't hesitate to contact me.

Rick Zabel
Vice President, Publisher
Automation.com

View our Privacy Policy

For editorial inquiries, please contact Rick Zabel
For advertising inquiries, please contact Karen Olson or Kia Weller, or see our Media Kit.