Home » Automation Federation joins security project
Automation Federation joins security project
Over the past few years, research has shown that SCADA and control system products often have serious security vulnerabilities. These vulnerabilities leave control systems exposed to viruses, hackers, and possibly terrorist activities from around the world. Industry standards like those arising from ISA-SP99 and NERC CIP-2-9 and the work of the OMAC MSMUG group have been addressing this issue from an end-user prospective, but this new initiative aims to help define methods by which suppliers of products can validate that there products afford the necessary level of secure operation. With this program, control system suppliers would be able to offer products that are proven to meet a standard set of minimum security requirements.
Joann Byres, Wurldtech’s applied research director, says "The deliverables for the study will include investigation of critical success factors in industrial certification organizations; an incorporation model designed to best meet the needs of industry (e.g. non-profit or for-profit); a proposed accreditation model and guidelines for interaction with standards bodies; governance, membership, code of conduct and voting model; legal and property rights guidelines; proposed budget and membership fee model; multiyear time line and milestones for the setup and operation of the organization; long-term sustainability of the organization; and an estimation of member commitment requirements in time and people. We expect the proposal will be completed by September 2006, and an organization could be launched in early 2007."
Eric Byres, Wurldtech’s director, adds, “Our vision is that any certification organization that arises will work very closely with existing standards groups. We'd give them both the draft documents that can be formulated as standards and the supporting research to enable informed decisions on security standards.
"We welcome the Automation Federation's support, especially because of the work of ISA and OMAC in the security standards arena, and we're looking forward to a close partnership."
ProComSol Distributes PowerXpress HART Power Solution
ProComSol Announces It Now Distributes PowerXpress HART Calibration Power Solution
West Texas Investigation Hampered by Inter-Agency Cat Fight
ATF and CSB in dispute about access to plant, witnesses, evidence.
News You Might Have Missed This Week from ControlGlobal and Elsewhere
Our Recap of Stories, Events and Ideas Floating Around the Internet Now
Fieldbus Foundation Launches Project Gemstone
New initiative is designed to make the fieldbus experience easier, more application-centered.
Pressure Sensors Monitor Remote Field Safety Trailers
AST Pressure sensors are used to monitor Nomadic safety trailers in the field in remote oil field locations.
Great Moments in Process Automation History
Take a broken soda fountain machine, a car a.c. unit, flavor mixes, water and CO2, add inventiveness; you get America’s favorite frozen drink.
Smart Grid: Independent Testing Of Rossi's E-Cat Cold Fusion Device Shows Positive Results
Forbes magazine's tech contributor Mark Gibbs writes that independent testing of Andrea Rossi's E-CAT Cold Fusion Reactor has positive results.The implications of the possible commercialization of cold fusion power sources are incredible.
Compressor Controls: Saudi Aramco Buys First GE Compressor Control Systems
Saudi Aramco has purchased advanced compressor control technology from GE for the Haradh GOSP-1 facility in Saudi Arabia's Eastern Province.
SANS Control Security Training Coming to Houston
SANS Institute will hold ICS Security Training event on June 10-15 in Houston
ISA Training Through June in Houston
Technician training, engineering survival and SIS boot camps for condensed, intense, comprehensive educational experience.
- All news »
Access the entire print issue on-line and be notified each month via e-mail when your new issue is ready for you. Subscribe today.
- Featured White Papers