艾默生的DeltaV™控制器和防火墻得到了Achilles一級網(wǎng)絡安全認證
DeltaV™系統(tǒng)是PlantWeb的關鍵組成部分,被認證為具有魯棒性防止網(wǎng)絡攻擊
德克薩斯5月29日新聞――艾默生過程管理公司今天宣布其DeltaV™控制器和防火墻已經(jīng)通過了Achilles一級認證測試,該認證測試旨在評估自動化控制器的整體安全性。DeltaV認證通過了超過2000萬項測試取得了一級認證。該DeltaV數(shù)字系統(tǒng)是艾默生的PlantWeb®數(shù)字工廠架構(gòu)的關鍵組成部分,也是自動化過程生產(chǎn)設備的全球領袖。
艾默生過程管理公司,市場,過程系統(tǒng)和解決方案部門副總裁Duncan Schleiss表示:“在DeltaV系統(tǒng)首次被開發(fā)出來時就開始致力于提供一個高度安全的控制網(wǎng)絡,這項努力一直在繼續(xù),這次認證通過是這種努力又邁進了一步?!薄癉eltaV系統(tǒng)自初次投入市場開始就已經(jīng)提供了如反病毒保護和基于角色的用戶安全性這樣一些安全特性,并被設計作為一個私有網(wǎng)絡使控制系統(tǒng)與其他任何非控制網(wǎng)絡分離。DeltaV防火墻的使用為DeltaV系統(tǒng)提供了一個即插即用的安全解決方案以展開最近經(jīng)測試的安全方案。”
Achilles認證計劃是由Wurldtech實驗室及其合作者開發(fā)的,旨在為安全工業(yè)控制器的認證提供一個基準。該計劃設計用于評定工業(yè)控制器的整體安全性,并對其安全性盡可能提供最完整,精確可信賴的信息。一級認證集中關注二級和四級認證,并執(zhí)行通用協(xié)議,如以太網(wǎng),ARP, IP, ICMP及UPD。
測試自動化控制器的挑戰(zhàn)在于缺乏有關賣主使用的協(xié)議棧詳細信息提供給賣主,尤其當該協(xié)議棧與其私有的協(xié)議聯(lián)合使用時。Achilles認證通過結(jié)合嚴格計算的測試包生成,并通過高度先進的黑匣子監(jiān)控技術正式認證解決了這個難題。復雜的測試包程序自動生成使得精確跟蹤辨認任意關注點以發(fā)現(xiàn)已知和未知錯誤和弱點。
艾默生過程管理公司高級產(chǎn)品部經(jīng)理Bob Huba表示:“自動化工程師可以更高程度的認識到DeltaV控制器已經(jīng)通過了一組公認的測試組和測試參數(shù),”“獲得一級認證的控制器已經(jīng)證明其防止網(wǎng)絡威脅的魯棒性。通過這些嚴格測試的一個實際的好處在于為用戶提供更好的計劃安全升級和新型反病毒信號的安裝能力。認識到該控制器可以抵御可能發(fā)生的安全事故,這為計劃測試過程進行的這些修補任務而非總是快速展開更新提供了一次機遇。”
DeltaV系統(tǒng)(www.EasyDeltaV.com)結(jié)合了系列保護層,入侵者必需通過連續(xù)的保護設備層,深入防護,包括能夠在安全層內(nèi)實施的保護。DeltaV網(wǎng)絡位于保護層的中間,這提供了盡可能多的系統(tǒng)隔離,避免收到工廠LAN網(wǎng)絡空間的攻擊。用于任意自動化系統(tǒng)的這項基本安全策略用于管理用戶和網(wǎng)絡進入系統(tǒng)以保護控制器收到攻擊。
有關Wurldtech
Wurldtech安全科技公司(www.wurldtech.com)總部位于加拿大BC范庫費峰,是SCADA,過程控制和核心業(yè)務行業(yè)安全解決方案的龍頭供貨商,公司成立于2006年,基于不列顛哥倫比亞理工學院的研究工作,致力于提供突破性的產(chǎn)品和服務,幫助保護全球關鍵基礎設施,并為全球主要工業(yè)組織和政府機構(gòu)提供安全需求。
艾默生過程管理( www.emersonprocess.com),是艾默生業(yè)務的一部分,是化工、石油天然氣、精練、紙漿與造紙、電力、飲用水和廢水處理、食品與飲料、生命科學和其它工業(yè)生產(chǎn)、過程和分配自動化的行業(yè)領袖。艾默生過程管理將先進的產(chǎn)品和技術結(jié)合在為特定工業(yè)而設計的工程、咨詢、項目管理和維護服務之中。艾默生過程管理旗下的品牌有:PlantWeb®, DeltaV™, Fisher®, Micro Motion®, Rosemount®, Mobrey®, Bristol®, Daniel®, Ovation®,以及AMS™組件。
original text:
[COLOR=#708090]
Emerson’s DeltaV™ controller and firewall achieve Achilles Level 1 cyber-security certification
DeltaV system, a key PlantWeb® component, is recognized for robustness against cyber threats
AUSTIN, TEXAS (May 29, 2007) - Emerson Process Management today announced that its DeltaV™ controller and firewall have passed Achilles Level 1 Certification Testing designed to assess the overall security of automation controllers. The DeltaV certification passed over 20 million tests to achieve Level 1 certification. The DeltaV digital system is a key component of Emerson’s PlantWeb® digital plant architecture, a global leader in automation of process manufacturing facilities.
"This is another step in our on-going effort to provide a highly secure control network that began when the DeltaV system was first developed," said Duncan Schleiss, vice president of marketing, Process Systems and Solutions, for Emerson Process Management. "Starting from the initial release, the DeltaV system has provided such security features as anti-virus protection and role-based user security, and is architected as a private network to keep the control system separate from any non-control networks. The use of DeltaV firewalls provides a plug-and-play security solution for DeltaV systems to deploy recently tested security solutions."
The Achilles Certification Program was developed by Wurldtech Labs and its partners to provide a benchmark for certification of secure industrial controllers. The program is designed to assess the overall security of industrial controllers and provide the most complete, accurate and trustworthy information possible on their security. Level 1 certification focuses on layers 2 to 4 and the implementation of common protocols such as Ethernet, ARP, IP, ICMP and UPD.
The challenge in testing automation controllers lies in a lack of detailed information available to vendors about the protocol stacks they are using, especially when used in conjunction with their own proprietary protocols. Achilles certification overcomes this problem by combining mathematically rigorous test-packet generation and stateful recognition with highly advanced black box monitoring techniques. Complex sequences of test packages generated automatically enable precise trace identification for any points of concern to discover both known and unknown errors and vulnerabilities.
"Automation engineers can have a higher degree of comfort knowing that DeltaV controllers have passed an accepted set of test suites and test parameters," said Bob Huba, senior product manager for Emerson Process Management. "Controllers with Level 1 certification have demonstrated the robustness to survive network cyber attacks. One real benefit of passing these rigorous tests is to provide users with the ability to better plan the installation of security updates and new anti-virus signatures. Knowing that the controllers can survive a possible security incident provides an opportunity to schedule these patching tasks around process activities rather than always immediately deploying the updates."
The DeltaV system (www.EasyDeltaV.com) combines the rings of protection, in which an intruder must get past successive layers of protection devices, with defense in depth, consisting of protections enabled within the security rings. The DeltaV network sits at the center of protection layers that provide as much system isolation as possible from attacks originating in the plant LAN network space. The basic security strategy for any automation system is to manage user and network access to the system to protect the controller from attack.
About Wurldtech
Wurldtech Security Technologies (www.wurldtech.com), headquartered in Vancouver, BC, Canada, is the leading provider of security solutions to SCADA, process control and mission-critical industries. Founded in 2006 based on research conducted at the British Columbia Institute of Technology (BCIT), Wurldtech is committed to delivering breakthrough products and services that help protect global critical infrastructure and address the security needs of major industrial organizations and government agencies worldwide.
Emerson Process Management ( www.emersonprocess.com), an Emerson business, is a leader in helping businesses automate their production, processing and distribution in the chemical, oil and gas, refining, pulp and paper, power, water and wastewater treatment, food and beverage, life science, and other industries. The company combines superior products and technology with industry-specific engineering, consulting, project management and maintenance services. Its brands include PlantWeb®, DeltaV™, Fisher®, Micro Motion®, Rosemount®, Mobrey®, Bristol®, Daniel®, Ovation®, and AMS™ Suite.[/COLOR]
聲明:本文為中國傳動網(wǎng)獨家稿件。未經(jīng)許可,請勿轉(zhuǎn)載。
下一篇:
?
2007年研華授權(quán)服務培訓正式啟動 ?
研華科技在上海對全國所有研華授權(quán)服務站的工程師們,從專業(yè)技術能力和客戶服務兩方面進行了為期兩天的培訓