How to improve network security

Sept. 16, 2006
There's no such thing as a 100% secure control system, but learning and understanding the risks associated with security standards, and how to mitigate them are a start. Check out this to-do list.
 

RELATED ARTICLE

Fence Me In: Common Sense Security
Rich Clark, information security analyst at Wonderware, offers the following to-do list to help users increase the security of their plant-floor networks:
  • Understand that there’s no such thing as a 100% secure system, unless it’s buried in a vault, still in the box, unplugged, and unconfigured.
  • Educate operators to look for operational anomalies. These are usually the first indication that something is wrong.
  • Learn and understand the risks associated with security standard you’ve implemented, and how to mitigate them.
  • Get control system engineers and IT synchronized, and working in the same department.
  • Create polices and procedures that include an organizational tree, which describes mitigation and alert vectors to be used if a breach or threat is found.
  • Schedule risk analyses on an ongoing basis.
  • Incorporate change control into the above procedures.
  • Know who to contact and what to do in case of a breach or attack.
  • Create a single-point failure matrix.
  • Follow current industry guidance and Microsoft domain isolation guidance, which presently has a patch that to allow a mostly one-button setup in XP-2K3 systems, and will be included as a one-button setup in a Longhorn/Vista domain.
  • During critical junctures of possible attacks or potential threats, pulling the plug on the outside world can be effective if the control system can be reduced to a single point of access.

Sponsored Recommendations

Make Effortless HMI and PLC Modifications from Anywhere

The tiny EZminiWiFi is a godsend for the plant maintenance engineers who need to make a minor modification to the HMI program or, for that matter, the PLC program. It's very easy...

The Benefits of Using American-Made Automation Products

Discover the benefits of American-made automation products, including stable pricing, faster delivery, and innovative features tailored to real-world applications. With superior...

50 Years of Automation Innovation and What to Expect Next

Over the past 50 years, the automation technology landscape has changed dramatically, but many of the underlying industry needs remain unchanged. To learn more about what’s changed...

Manufacturing Marvels Highlights Why EZAutomation Is a Force to Be Reckoned With

Watch EZAutomation's recent feature on the popular FOX Network series "Manufacturing Marvels" and discover what makes them a force to be reckoned with in industrial automation...