Security draft released for industrial control systems

T

he Process Control Security Requirements Forum (PCSRF), a nearly 600-member group of industry, government and academic technical experts, led by the National Institute of Standards and Technology (NIST), released a new draft set of cyber security requirements for industrial control systems. These security requirements are intended to be used in procurement documents for new industrial control systems or components. The implementation of these requirements will help protect the nation's critical industrial infrastructure from cyber attacks.

The new requirements also should protect against other criminal efforts to remotely access and control production and distribution processes. The proposed requirements should be of special interest to computer security and process control personnel in the electric power, oil, gas, water, chemicals, pharmaceuticals, metals and mining, pulp and paper, and durable goods manufacturing industries.

Currently, network connectivity is a virtual prerequisite for an efficient industrial enterprise, says the group. Many of today's systems were designed years ago to maximize performance, reliability and safety. Security was not a significant consideration since systems usually were confined to in-house use and were based on proprietary hardware and protocols. Today, however, process control systems often incorporate off-the-shelf products, use open protocols and connect to business networks—any of which could allow security to be compromised.

The forum's draft report addresses security requirements needed throughout an industrial control system's lifecycle including design, implementation, configuration, maintenance and decommissioning. The draft deals with industrial control systems such as supervisory control and data acquisition systems, distributed control systems, and programmable logic controllers Requirements for components of the control system such as industrial controller authentication and sensor authentication also are outlined. 

Click here to download a complete version of the draft.

More News:

  • WEG Electric Introduces the CFW500 Machinery Drive

    WEG's engineers specifically designed this new drive with increased features that focus on the machinery manufacturer's needs. It is simple, efficient, flexible and can be commissioned quickly and easily.

  • Manufacturing Technology Orders Down in May 2014

    Expectations for the 2014 manufacturing technology market were for a soft first half of the year, followed by a stronger second half. The fluctuations seen in the past few months are on track with forecasts, and all indications are that U.S. manufacturing activity is and will remain strong

  • Fast 2014 Start for NA Robotics

    A record 14,135 robots, valued at $788 million were ordered from North American robotics companies in the first half of 2014, an increase of 30% in units and 16% in revenue over the same period in 2013.

  • WEG Electric Introduces the CFW100 Mini Drive

    Programing is easy with the built in keypad that monitors two different parameters at the same time along with operation status, alarms and faults.

  • New and Noteworthy: Ocean Data Systems Develop Specialized Survey and Omega Engineering Receives Honorable Mention

    Omega Engineering received an Honorable Mention in the 2014 Best of Sensors Expo Innovation Award for its M12LCP thermocouple probes with high- temperature M12 molded connectors. The Gold Award winner was AG-SL900A EPC sensor tag and data logger IC from ams.

  • IMTS Will Land Big Footprint in Chicago

    The IANA pavilion will showcase the newest technologies focusing on new ideas and topics ranging from resource-efficient manufacturing and network security to secure industrial control systems and big data. In addition to more than 120 vendors from 16 countries, who will demonstrate their products and services, IANA will host the Global Automation and Manufacturing Summit, Motion, Drive & Automation Conference, and ISA training program.

  • NI Week Aids Industrial IoT Convergence

    Truchard reported that NI divides IoT into industrial IoT and consumer IoT, and this industrial side is focused on using big analog data, analytics, distributed timing and synchronization, and intelligence via cyber-physical systems to help factories, power grids, cities and machines work better.

  • Infographic: Internet of Things - What The Future Will Be Like

    The past 25 years of Internet growth was fueled by human communications. The next 25 years of Internet growth will be fueled by machines. How is the Internet going to affect us and what we do?

  • Bits and Bytes: Moxa Gets UL Certification; Fieldbus Int'l and Fieldbus Inc. Enter Strategic Alliance, and More

    Lemo, a Swiss designer and manufacturer of custom connectors, acquired Northwire, U.S. specialty cable manufacturer of wire and multi-conductor cable and retractiles for the medical, aerospace and defense, energy and industrial markets.

  • Industrial Businesses Know They Need More Cybersecurity; Don't Do Much About It

    So what are companies waiting for? Reasons cover everything from lack of knowledge about threat severity to worry about the cost-effectiveness of remedial efforts and the effect they might have on uptime. A full one-third of those surveyed reported they were unaware of the potential vulnerabilities in their ICS/SCADA environment, and another 19% said they were unsure about the degree of threat.

All news »

What are your comments?

You cannot post comments until you have logged in. Login Here.

Comments

No one has commented on this page yet.

RSS feed for comments on this page | RSS feed for all comments