IT in Manufacturing


Tofino Enforcer

September 2009 IT in Manufacturing

New Modbus-IDA certified security solution addresses US government security concerns.

Byres Security and MTL Instruments have introduced the Tofino Modbus TCP Enforcer loadable security module (LSM), which performs detailed analysis and filtering of all Modbus TCP messages, and is certified by Modbus-IDA. It allows owners of control and scada systems to regulate Modbus network traffic to a level of detail that was previously not possible, thereby increasing network security, reliability and performance of critical systems.

‘Deep packet’ or ‘content’ inspection for web e-mail or traffic has been offered in IT firewalls for several years, but nothing has been available for the process control and scada environment. Modbus traffic could either be allowed or blocked by a standard firewall, but fine-grained control was impossible. And since the smooth flow of Modbus TCP traffic is critical to the average industrial facility, engineers usually opted to let everything pass and take their chances with security. Industry experts have been urgently calling for better control of scada protocols.

Recently, a major US government agency warned: “Vulnerability has been identified within the firmware upgrade processes used in control systems deployed in critical infrastructure and key resources (CIKR). Development of a mitigation plan is required to protect the nation’s CIKR through vulnerability mitigation steps that include blocking network firmware upgrades with appropriate firewall rules.”

Two major energy companies and a transportation company have tried the Tofino ModbusTCP Enforcer LSM and are excited by how it allows them to follow government guidelines and enhance both system security and stability. Modbus functions can now be restricted in numerous ways:

* Blocking all firmware upgrades while allowing normal HMI traffic.

* Tailoring appropriate Modbus access permissions to PLCs for different stations.

* Restricting Modbus access permissions to specific memory locations in a controller.

* Enforcing read-only access to safety instrumented systems.

The complete Tofino industrial security solution consists of three core components:

* Tofino Security Appliance – an industrially hardened and certified appliance that is installed in front of individual and/or zones of HMI, DCS, PLC or RTU control devices that require protection.

* Tofino LSM – a variety of software plug-ins providing security services such as firewall, secure asset management and VPN encryption. Each LSM is downloaded into the security appliances to allow them to offer customisable security functions, depending on the requirements of the control system.

* Tofino Central Management Platform – a centralised management system and database for monitoring, supervision and configuration of each security appliance. One CMP can manage one or more LSMs.

For more information contact Gary Friend, Extech Safety Systems, +27 (0)11 791 6000, extech@jhbmail.co.za, www.extech.co.za



Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

The digital twin explained
July 2020, Yokogawa South Africa , IT in Manufacturing
Among numerous emerging technologies in the process industries today, the digital twin is one of the most powerful and disruptive because it constitutes a rich look at the past, present and future of ...

Read more...
The Fourth Industrial Revolution
July 2020 , IT in Manufacturing
  

Read more...
Smart engineering directly in the cloud
June 2020, Beckhoff Automation , IT in Manufacturing
PC-based control is an open, central control platform that integrates a full range of machine functionality and optimally supports the implementation of highly efficient IoT-based automation strategies. ...

Read more...
Creating specific SensorApps
June 2020, SICK Automation Southern Africa , IT in Manufacturing
Create individual SensorApps without programming skills and solve new automation tasks easily. Starting at the end of the year, this will all be possible in the SICK AppStudio, part of the SICK AppSpace ...

Read more...
Mobile robots speed production at new smart factory
July 2020, Omron Electronics , IT in Manufacturing
A dozen industrial robots, each in individual workstations or cells, perform different steps in the manufacturing process. However, to attain the high efficiency, safety, and convenience of a modern ...

Read more...
The administration of digital twins
July 2020, SICK Automation Southern Africa , IT in Manufacturing
In order to access the virtual representation of the sensor and its data, SICK Automation uses LiveConnect to deliver a standardised connection from an edge gateway to SICK Asset Hub. This visualises ...

Read more...
How IIoT solutions can help your plant go digital
July 2020, Endress+Hauser South Africa , IT in Manufacturing
Everyone is talking about the new normal, a shift that is forcing companies to adopt a digital strategy, one way or another, in order to remain relevant and competitive in these unprecedented times. Many ...

Read more...
Fast IT rack launched in South Africa
July 2020, Rittal , IT in Manufacturing
Introducing a new generation of IT racks Conceived as a universal modular system, the VX IT has been designed for all common applications and its versatility makes it suitable for use as a network and ...

Read more...
Engineering 4.0: Automatic dashboard generation
July 2020, Beckhoff Automation , IT in Manufacturing
Many machine builders and systems integrators looking to transform their business models have identified machine and plant process data as being a core fundamental. When it comes to tailoring new data-driven ...

Read more...
Completing the remote maintenance circle
July 2020, Throughput Technologies , IT in Manufacturing
What do the world’s machine builders want from a next generation remote maintenance solution? Secomea has been listening to thousands of them and has spotted a pattern. In this collective vision the ...

Read more...