Dear %%if(%%firstname%% is empty,Colleague,%%firstname%%)%%:
To receive the latest automation information, add enews@automation.com to your address book.
Read the online version if links don't work in this Security Update.
Security Update from Automation.com
November 2009
Sponsor: Honeywell

Security for Industrial Plants from Honeywell Process Solutions

Security for Industrial Plants from Honeywell Process Solutions

As a global leader in both security and process control technology and as an operator of our own chemical plants, Honeywell Process Solutions is uniquely qualified to provide security for industrial plants. Our innovative solutions can be scaled for sites of all sizes, adapted to different risk levels and seamlessly integrated with process control and building controls. And most importantly, protect your plant and employees, help you meet regulatory requirements and keep your surrounding community safe.

Visit our website for more information

 

Sponsor: Longwatch

Don’t get caught with your pants down!

Don’t get caught with your pants down!

The Longwatch Video System eliminates blind spots in the field by integrating local AND remote video. Before-and-after video is delivered automatically to your operator’s console when events occur. It’s the most cost-effective solution for security, safety and regulatory compliance. Longwatch software works with your computers, your cameras and your network.

Find out why many industrial customers rely on Longwatch to avoid surprises and keep things under control.

 

ISA Products & Services

Solutions for Automation Professionals

ISA Books

 

Connect with Automation.com

LinkedIn GroupFacebook GroupTwitterMyAutomation.com

In this Issue
>> Featured Articles
>> Product Announcements
>> White Papers
>> Resources & Literature
>> Application Stories
>> Featured Training
>> Company News
>> Featured Events
image
Featured Articles

Pursuing the discipline of control system cyber security
Plant Engineering, September 2009
By John Cusimano
What does it mean to have a safety and security culture? First, it means management commitment from the highest levels. Second, it means management demonstrates that commitment by establishing and improving safety and security management systems. Finally, it means enforcing these systems and holding individuals accountable for failure to follow them.

SCADA Security, Compliance, and Liability – A Survival Guide
Pipeline & Gas Journal, September 2009
By Clint Bodungen, et al
Operators face an almost overwhelming number of standards, guidelines, and best practices that require interpretation with little guidance. Operational and security requirements are often confusing, sometimes inconsistent. Security-related documents often purport to be the required standard even when they are not while security programs are not tailored for specific operations. Addressing this requires an understanding of the requirements and development of an appropriate solution.

Managing an open system
Plant Engineering, August 2009
By Shawn Gold, Honeywell Process Solutions
For all the benefits open systems provide, they pose significant IT challenges. End users can only rely so much on their automation suppliers for support to keep process control networks secure. The reality is that plant engineers are now responsible for increasingly complex open automation architectures and the specialized IT support functions that go along with them.

Data Security and Integrity On Your CMMS
Maintenance On Line, August 2009
Your CMMS data is never 100% secure from mechanical breakdown, natural disasters, human error, or malicious acts.

Four Building Security Hotspots
Building Operation Management, August 2009
By Lacey Muszynski
If a company hasn’t had a serious security incident for some time, C-suite executives often become complacent and may wonder if all the security systems, regulations and jobs already in place are necessary. But complacency isn’t a good reason to cut the security budget, especially in a recession when crime often increases.

Browse more articles on the Security portal.

Live News Feed
Visit our Automation Portals

Our Automation Portals organize information on various topics and include content published on Automation.com as well as other industry websites. Each portal includes new products, company news, articles, white papers, application stories, training, resources, events, and more.

Visit these one-stop sites for all your automation information

 

Product Announcements
Longwatch introduces Operator’s Console Recorder Longwatch introduces Operator’s Console Recorder
Video software records exactly what was on HMI screens when an event occurred, archives it, and plays the video back for training or analysis purposes.
AXIOMTEK announces Intel Core2 Duo NA-820L network appliance AXIOMTEK announces Intel Core2 Duo NA-820L network appliance
NA-820L network appliance combines firewall, VPN, IDS/IPS, content filtering, UTM, network management, and network security capabilities.
Emerson announces Ovation Security Center Emerson announces Ovation Security Center
The security center streamlines, centralizes execution of cyber-security management functions, enabling water and wastewater facilities to more easily manage security efforts.
Ethernet Direct releases explosion proof EDH industrial IP Cameras Ethernet Direct releases explosion proof EDH industrial IP Cameras
EDH series for mission critical industrial applications is compliant to IEC529, has a weatherproof IP68 housing standard. and is vandal proof.
Lanner announces FW-8875 network appliance Lanner announces FW-8875 network appliance
FW-8875 is a platform for enterprise-class network security and acceleration solutions such as UTM, VPN firewall, WAN acceleration and gateway antivirus/anti-spam/URL filtering appliances.
  Invensys announces solutions to cyber attacks
Cyber security solutions include control system enhancements and consulting services that support major cyber security standards, such as NERC.
Other Product Announcements

Browse more Product Announcements on the Security portal.

Search all Products by keyword, category, manufacturer or release date.

White Papers

Maritime Security: Meeting Threats to the Offshore Oil and Gas Industry
By Honeywell Process Solutions
A major issue for worldwide energy companies is securing offshore oil and gas platforms. This paper covers the challenges faced by the oil & gas industry in securing offshore production assets, including key requirements for an effective platform security strategy, and the latest technology enabling an integrated security management system.

Creating Secure OPC Architectures
By Adriel Michaud, MatrikonOPC
Technical guide on how to secure typical OPC implementations. It covers OPC DA, HDA, and A&E, securing OPC Servers from unauthorized OPC Client access, and restricting authorized OPC Clients to only the functions necessary.

The Web of Things
By Tridium
Whitepaper discusses the state of device networks and how IP and Web technologies can become enablers to tap the huge potential of smart devices.v

Hacking the Industrial Network
By Innominate Security Technologies
While many engineers believe that their production networks are isolated from outside access, nothing could be further from the truth. It is common practice to include access to Web-based services on most programmable logic controllers. This report identifies incidents involving major corporations, utilities, nuclear plants and the Pentagon. A table of twenty-nine major incidents is provided, some of which were kept secret for years. Detailed footnotes and clickable internet research links are provided to document these incidents and each statement of fact.

Computer Architectures for Embedded Safety-Critical Applications
Industrial Embedded Systems, March 2009
By Manfred Schmitz, MEN Micro Elektronik
The terms “safety” and “security” are often confused. The technical term "security" means that something not only is secure but that it has been secured. A safe system is a system with a determined error behavior. Registration required to download.

Browse more white papers on the Security portal.

Resources & Literature

ISA publishes Collaborative Process Automation Systems book  
The book discusses topics such as engineering, security, enterprise connectivity, advanced process control, plant asset management and operator efficiency.

Green Hills opens Networking Solutions Center  
The Solutions Center is staffed by a team of engineering veterans dedicated to advancing network protocol technology, industry protocol collaboration, and network security.

Browse more resources and literature on the Security portal.

Application Stories

Cyber Security—A Must For the Smart Grid  
Automation World, August 2009
By Rob Spiegel
Electric plants bolster cyber security as NERC starts audits on Internet safety. Like many electric plants, the Grant County Utility District (GCUD) in Ephrata, Wash., needed to bring its cyber security into compliance with standards developed by the North American Electric Reliability Corp. (NERC).

Under Watchful Eyes  
Automation World, August 2009
By Wes Iversen
Dutch-based Shell is pursuing an aggressive, multimillion-dollar initiative to keep computer worms, viruses and cyber intruders out of its process control systems.

Browse more application stories on the Security portal.

Featured Training

SCADA & Control Systems Security Summit
December 7-9, 2009 Washington, D.C.
At SCADA & Control Systems Security Summit, policymakers, regulators, technology experts and utility practitioners will guide you in determining your system’s exposure to attack and how to protect it from such threats.

Using the ANSI/ISA99 to Secure Your Control System
This course provides a detailed look at how the ANSI/ISA99 standards can be used to protect your critical control systems. It also explores the procedural and technical differences between the security for traditional IT environments and those solutions appropriate for SCADA or plant floor environments.

Browse more training and seminar opportunities on the Security portal.

Company & Organizational News

ISA selects Automation.com as advertising sales partner
In addition to daily and weekly digital and online content, ISA will publish 6 print issues of InTech magazine in 2010. ISA selected Automation.com as the advertising sales representative for InTech magazine’s print, digital, and online editions.

ISA describes plans for ISA Automation Week 2010  
ISA Automation Week will feature intensive educational and applications-based technical conference sessions delivered by subject matter experts. The event will have a focused exhibition area for a limited number of companies to showcase products and services.

Eric Byres made ISA Fellow  
ISA announced they have awarded Eric Byres, the Chief Technology Officer at Byres Security, the rare honour of ISA Fellow.

Longwatch signs Industrial Network Systems as systems integrator  
Longwatch signed Industrial Network Systems as its distributor and systems integrator in Illinois, Indiana, Western Kentucky and Eastern Missouri.

Byres Security supplies Tofino to Honeywell  
Honeywell selected Tofino technology for its OneWireless Firewall. The product filters bi-directional network traffic, allowing only wireless I/O on both directions, while blocking other data types.

Browse more company and organizational news on the Security portal.

Featured Events

Tech-Security Conference 2009
November 19, 2009 Atlanta, GA
25-30 vendor exhibits and several industry experts discussing current tech-security issues such as email security, VoIP, LAN security, wireless security, USB drives security & more.

Intersec
January 17-19, 2010 Dubai
International meeting platform for security, safety and protection. Intersec trade fair and conference plays a major role in reflecting the security industry worldwide.

Hannover Messe Middle East  
February 9-11, 2010 Dubai
Deutsche Messe Hannover will be staging CeMAT Middle East, Industrial Automation (IA) Middle East, and Motion, Drive & Automation (MDA) Middle East together.

Automation Technology Egypt 2010
May 10-12, 2010 Cairo, Egypt
The conference is mainly aimed at demonstration of advanced developments in the domain of automation and information technologies in industry and new opportunities for business development.

ISA announces Automation Week show  
October 4-7, 2010 Houston, TX
ISA Automation Week, a knowledge-based conference event, will deliver critical knowledge on the application of automation technologies in processing and manufacturing environments.

Browse more industry events on the Security portal.

Add an event to our calendar.

I hope you enjoyed this Security update. If you have any comments or suggestions regarding the content in this e-newsletter or on Automation.com, please don't hesitate to contact me.

Rick Zabel
Vice President, Publisher
Automation.com

View our Privacy Policy

For editorial inquiries, please contact Rick Zabel
For advertising inquiries, please contact Chris Nelson, or see our Media Kit.