RSA 2013 and ICS cyber security

March 3, 2013
The control systems used in critical infrastructures are different than those in traditional business IT systems. As mentioned in a previous blog, I am currently working with one of the only electric utilities in the US (they are not ready to identify themselves publicly) that is actually trying to secure their control systems and not just meet compliance requirements like almost all other US utilities. This utility has also been willing to be a test bed for evaluating control system cyber security technologies.
The control systems used in critical infrastructures are different than those in traditional business IT systems. As mentioned in a previous blog, I am currently working with one of the only electric utilities in the US (they are not ready to identify themselves publicly) that is actually trying to secure their control systems and not just meet compliance requirements like almost all other US utilities. This utility has also been willing to be a test bed for evaluating control system cyber security technologies. Consequently, I spent this past week at the RSA Security Conference (more than 25,000 attended) trying to find who might have technologies that can help secure ICSs that would willing to have their systems evaluated. Unfortunately, very few of the vendors had technologies that were specifically designed to secure systems beyond Windows (or other commercial off-the-shelf) operating systems or Internet Protocol (IP) networks. In fact, some solution suppliers even acknowledged their solutions could add significant latency but they didn't think it would matter. However, latency is very important in a control system environment. There were very few sessions devoted to critical infrastructures and all presentations had the term SCADA in the title. The level of understanding of control system cyber security, besides the use of the terms "SCADA" and critical infrastructures", was not very high.Joe Weiss

Sponsored Recommendations

Make Effortless HMI and PLC Modifications from Anywhere

The tiny EZminiWiFi is a godsend for the plant maintenance engineers who need to make a minor modification to the HMI program or, for that matter, the PLC program. It's very easy...

The Benefits of Using American-Made Automation Products

Discover the benefits of American-made automation products, including stable pricing, faster delivery, and innovative features tailored to real-world applications. With superior...

50 Years of Automation Innovation and What to Expect Next

Over the past 50 years, the automation technology landscape has changed dramatically, but many of the underlying industry needs remain unchanged. To learn more about what’s changed...

Why should American-Made Products be a top priority?

Within this white paper, Shalabh “Shalli” Kumar, founder of AVG Advanced Technologies, stresses the importance of prioritizing American-made products to safeguard the country'...