Security module addresses government SCADA concerns

Byres Security Inc. and MTL Instruments, a division of Cooper Crouse-Hinds, introduced the Tofino Modbus TCP Enforcer Loadable Security Module (LSM) at the ISA show this week in Houston, TX. The module performs detailed analysis and filtering of all Modbus TCP messages and is certified by Modbus-IDA.

10/15/2008


Byres Security Inc. and MTL Instruments, a division of Cooper Crouse-Hinds, introduced the Tofino Modbus TCP Enforcer Loadable Security Module (LSM) at the ISA show this week in Houston, TX. The module performs detailed analysis and filtering of all Modbus TCP messages and is certified by Modbus-IDA.
d firewall, but fine-grained control was not possible, said Eric Byres, CTO at Byres Security Inc.  “And since the smooth flow of Modbus TCP traffic is critical to the average industrial facility, engineers usually opted to let everything pass and take their chances with security,”he added.
This detailed level of analysis and filtering in SCADA systems has recently become a government-level concern. This year, the U.S. Department of Homeland Security warned: “A vulnerability has been identified and verified within the firmware upgrade process used in control systems deployed in critical infrastructure and key resources (CIKR)…development of a mitigation plan is required to protect the installed customer base and the CIKR of the nation. Firmware vulnerability mitigation steps [include] blocking network firmware upgrades with appropriate firewall rules.”
Two global energy companies and a major transportation company have thus far tested the Tofino ModbusTCP Enforcer LSM and are reportedly pleased with how it allows them to follow the government’s guidance and enhance both the security and stability of their systems.

  • Blocking all firmware upgrades, while allowing normal HMI traffic;

  • Tailoring appropriate Modbus access permissions to PLCs for different stations, such as read-only for monitoring panels, read/write for HMIs, and full programming and diagnostics access for PLC engineering workstations;

  • Restricting Modbus access permissions to specific memory locations in a controller;

  • Providing enhanced security and protection for any Modbus TCP device, including filtering of invalid traffic that could cause denial of service or system failures; and

  • Enforcing read-only access to safety instrumented systems for enhanced isolation and safety.

“Tofino provides tailored protection for groups of PLCs, DCSs, RTUs, and HMIs in a way that is simple to implement for control engineers,” said Byres. “Security is taken care of, and focus can be maintained on keeping processes running safely and efficiently.”
For more information: www.byressecurity.com ; www.mtl-inst.com ; www.modbus.org
– Edited by David Greenfield , editorial director
Control Engineering News Desk
Register here and scroll down to select your choice of eNewsletters free .





No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Robotic safety, collaboration, standards; DCS migration tips; IT/OT convergence; 2017 Control Engineering Salary and Career Survey
Integrated mobility; Artificial intelligence; Predictive motion control; Sensors and control system inputs; Asset Management; Cybersecurity
Big Data and IIoT value; Monitoring Big Data; Robotics safety standards and programming; Learning about PID
Featured articles highlight technologies that enable the Industrial Internet of Things, IIoT-related products and strategies to get data more easily to the user.
This article collection contains several articles on how automation and controls are helping human-machine interface (HMI) hardware and software advance.
This digital report will explore several aspects of how IIoT will transform manufacturing in the coming years.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Mobility as the means to offshore innovation; Preventing another Deepwater Horizon; ROVs as subsea robots; SCADA and the radio spectrum
Future of oil and gas projects; Reservoir models; The importance of SCADA to oil and gas
Big Data and bigger solutions; Tablet technologies; SCADA developments
Automation Engineer; Wood Group
System Integrator; Cross Integrated Systems Group
Jose S. Vasquez, Jr.
Fire & Life Safety Engineer; Technip USA Inc.
This course focuses on climate analysis, appropriateness of cooling system selection, and combining cooling systems.
This course will help identify and reveal electrical hazards and identify the solutions to implementing and maintaining a safe work environment.
This course explains how maintaining power and communication systems through emergency power-generation systems is critical.
click me