Managing Automation - November 2008 - (Page 28)

[ SPECIAL REPORT ] facturers alike, Harbor estimates. But this world of hyper-connectivity, where virtually any industrial machine, instrument, or sensor can be networked, comes with a cautionar y caveat: Managing this everincreasing “network of things” will require new types of security tools and strategies. That’s because, as the number of networked devices grows, so does the risk that there could be a security breach caused by the inadequately protected coffeemaker in the kitchen or the gauge in the refinery. “As things scale, there is a lot of risk related to information being disclosed or, worse, something getting blown up,” Harbor Research President Glen Allmendinger says. In this new world, experts say, triedand-true security strategies and tools won’t cut it. Historically, businesses have attempted to protect networks by hardening the perimeter with tools such as firewalls. When everything is connected to the Internet, however, that’s not good enough. “Firewalls were good in their day, but think back to how long they’ve been around,” says Ken Pappas, vice president of marketing and security strategist at Top Layer Networks. Having a firewall isn’t enough, as it means that “anyone who understands hacking tools can go after a company and disturb the business.” To offset a potential security breach in this new commingled topology of Internet, cellular, Ethernet, and wireless mesh connections, manufacturers will need to take a layered approach that protects the core of the network — not just the perimeter, as a firewall does. Instead, experts say, this new device security framework combines governing policies and procedures; virus protection; encryption and authentication technology; network scans that identify rogue devices; software that can identify an abnormality before, rather than after, an incident; and visibility into a breach. “There is a new word in the security business, called ‘de-perimetization,’ “ says Wayne Manges, program manager for the industrial wireless program, a Department of Energysponsored program at Oak Ridge National Laboratory. “It is about protecting the data, not the perimeter.” New products from companies such as Mocana Inc., Top Layer Networks, Apprion Inc., and Motorola are focused in different ways on providing layered security protection at the core. In addition, the control vendors are beginning to take on more reNovember sponsibility when it comes to securing their system architectures. Invensys Process Systems, for example, within the past four years, has put together a comprehensive managed service program for plant cyber-security. Husky Energy’s Upgrader plant in Lloydminster, Saskatchewan, Canada, is in the first phase of implementing a managed security solution from Invensys. The contract includes assessment, design, and implementation of “Anyone who understands hacking tools can go after a company.” — Top Layer Networks’ Ken Pappas real-time management of Husky’s plant and production networks. Working with Integralis, a global managed security ser vice provider, Invensys provides round-the-clock network monitoring for Husky. CHARTING NEW TERRITORY Moving to this new, layered security model has not been easy for vendors or manufacturers. Maintaining network integrity through multiple layers of security is a model that applies not only to industrial control networks, but also to IT due to the proliferation of mobile devices. Scattered devices — PDAs, notebook computers, or pressure gauges — connecting back to the corporate or plant network suddenly become security threats. But even as industr y organizations such as IEEE and ISA work to hammer out multi-layer security standards, it is still untapped territory, meaning that not many people understand how the various layers need to interact without potentially leaving a weak link along the way — or worse, disr upting manufacturing operations. That’s, in part, because of a lack of expertise in the area of security, says Ernest Rakaczky, principal security consultant in the Invensys Process Systems Enterprise Architecture & Integration group. “They are still struggling to figure it out,” he says. Harbor Research’s Allmendinger agrees. “There is a lot of arm-waving [around security], but not a lot of people understand the next-generation technology. It’s like the blind leading the vision-impaired.” First, experts say, manufacturers and vendors alike need to educate themselves about the new cyber-security threats facing plants. Then IT groups and automation vendors ma 28 2008

Table of Contents Feed for the Digital Edition of Managing Automation - November 2008

Managing Automation - November 2008 Contents Take 1 At One-Year Mark, Wonderware President Focuses on Empowering Plant Operators Oracle Demos Fusio Apps, Reveals Delays Baan Founder Says BPM Will Replace ERP Emerson Talks Wireless at Annual User Group Event Merger Complete, Intercim Focuses on Collaboration Notes Cover Story: The New Supply Chain Reality Special Report: Keep Out Integration: The On-Demand Interchange Industries: Ending the Endless Waves of Paper Product Scan Advertiser Index Next

Managing Automation - November 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.