IT in Manufacturing


Securing critical industrial processes in real-time

September 2012 IT in Manufacturing

The susceptibility of critical scada systems to security issues confronts many organisations. While it may be rare to penetrate a control system directly from the Internet, corporate intranet connections, remote support links, USB keys, and laptops can all create pathways for the typical worm or hacker. Once inside, impacting an industrial control system is not difficult – in some cases, even the most basic scanning by a hacker or worm can wreak havoc.

Unfortunately, 99% of all scada and process control devices do not support even basic authentication and authorisation functions. Thus, these devices cannot take advantage of any of the security infrastructures offered by many corporate IT departments. Complicating the matter even more, many scada end users have found the common VPN solutions to be either unbelievably complex to manage in real-time or ill-suited for handling the protocols that are found in automation networks.

Security in aerospace manufacturing

A major aerospace manufacturer faced exactly these issues when securing the systems used in the production of its long-range passenger aircraft. Large, highly mobile crawlers with extensive PLC and HMI components are vital for the assembly of new aircraft. In order to coordinate that assembly, these PLCs require secure access to each other and real-time connection to the corporate network.

Since the PLCs are installed on mobile platforms, they require wireless access to communicate. However, the models of PLCs currently on the market cannot participate in the corporate public key infrastructure (PKI) system, which is a requirement for secure wireless communications. Furthermore, the plant security solution must modify security policy (and allow PLC to PLC connections) based on information from a large variety of sources that change rapidly. For example, the position of a crawler or the card scan of an operator will determine which PLCs can interconnect.

Scadanet Endboxes secure the PLCs

The solution is an architecture called Scadanet that provides a simple and secure encryption system between control devices. Each crawler is protected by a Scadanet Endbox. These Endboxes interconnect securely with other Endboxes over a variety of secure or insecure networks, including the corporate intranet, various cellular services or even the Internet. The Endboxes interact with the corporate IT security services, including the PKI system, to provide an encrypted overlay network between the PLCs assigned to them by the crawler operators.

F-Map ties it all together

Tying all the Endboxes together in a scalable manner is a central publish/subscribe repository of network information based on the interface metadata access protocol (IF-Map) technology. This Trusted Computing Group standard allows systems from different vendors to publish information that the Endboxes can use to determine security policy in real-time. For example, if the IP address of an Endbox changes because a crawler has moved into the range of a new wireless access point, then this information can be propagated to other Endboxes so that critical communications are not disputed. Or if an operator that is not approved for a given crawler swipes into the badge reader, the crawler can be immediately disconnected from the critical control network.

The Scadanet architecture, IF-Map and Tofino Endboxes provide a framework that allows the IT department to manage access to its services and yet let the scada engineers maintain full control over their network systems and devices.



Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Quantum computing and its impact on data security: a double-edged sword for the digital age
IT in Manufacturing
Quantum computing is poised to redefine the boundaries of data security, offering groundbreaking solutions while threatening modern encryption’s foundations. For third-party IT providers, this duality presents both a challenge and an opportunity to lead organisations through one of the most significant technological transitions in decades.

Read more...
Next-generation road-legal race car.
Siemens South Africa IT in Manufacturing
Siemens Digital Industries Software has announced that Briggs Automotive Company (BAC) will move to the Siemens Xcelerator portfolio of industry software and use it to develop the next generation of its single-seater road-legal race car, Mono.

Read more...
Cybersecurity at a crossroads
IT in Manufacturing
here’s a growing unease in boardrooms, data centres and cabinet offices across South Africa. It’s not just about economic headwinds or political uncertainty, it’s about something quieter, more technical and yet just as dangerous - the rising tide of cyber threats.

Read more...
Enabling a sustainable industrial organisation
IT in Manufacturing
This article explains the top sustainability trends and key actions that you can leverage to become a more sustainable organisation.

Read more...
Navigating discrete manufacturing in South Africa through digitalisation
IT in Manufacturing
South Africa’s discrete manufacturing sector faces mounting pressure from global competition, fragmented supply chains and outdated infrastructure. In this complex environment, digitalisation is a critical lever for survival, resilience and growth.

Read more...
Africa’s pragmatic approach to AI and how data centres are enabling it
Schneider Electric South Africa IT in Manufacturing
In Africa, the current AI momentum is driven by a fundamental need, building a resilient digital infrastructure that addresses the real-world challenges of the continent’s communities.

Read more...
World first simulation of error-correctable quantum computers
IT in Manufacturing
Quantum computers still face a major hurdle on their pathway to practical use cases, their limited ability to correct the arising computational errors. In a world first, researchers from Chalmers University of Technology in Sweden have unveiled a method for simulating specific types of error-corrected quantum computations.

Read more...
Platform to accelerate supply chain decarbonisation
Schneider Electric South Africa IT in Manufacturing
Schneider Electric has launched Zeigo Hub by Schneider Electric, a powerful new digital platform designed to help organisations decarbonise their supply chains at scale.

Read more...
Future-ready data centres
IT in Manufacturing
The white paper ‘Future-Ready Data Centres’ by Black & Veatch outlines how integrating sustainable design principles not only helps meet ESG goals but also ensures reliability, operational efficiency and business continuity in the face of climate change and growing digital demand.

Read more...
Sustainable energy management
Siemens South Africa IT in Manufacturing
Utilising its innovative ONE approach technology, Siemens provides complete transparency on resource consumption and offers data-driven optimisation recommendations for sustainable energy management.

Read more...









While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd | All Rights Reserved