Instrument Engineers Handbook and lack of ICS Security

June 29, 2010

Yesterday, I had a chance to talk to Bela Liptak author of the Instrument Engineers Handbook. I asked him if it would be possible to write a section on cyber security for the next edition. He sent me to Halit Curtin who is compiling Volume 3, edition 4 of the Handbook.  There are currently four authors contributing sections to Chapter 7: Network Security. The first section was on "Network Security Awareness, Management and Risk Analysis" by Helen Anderson. It specifically references ISO 17799 and the 27000 series and ISACA -ISA S99 is not mentioned.

Yesterday, I had a chance to talk to Bela Liptak author of the Instrument Engineers Handbook. I asked him if it would be possible to write a section on cyber security for the next edition. He sent me to Halit Curtin who is compiling Volume 3, edition 4 of the Handbook.  There are currently four authors contributing sections to Chapter 7: Network Security. The first section was on "Network Security Awareness, Management and Risk Analysis" by Helen Anderson. It specifically references ISO 17799 and the 27000 series and ISACA -ISA S99 is not mentioned. The next section was "Network Security, Threats, Authentication, Authorization, and Securing Devices" by Wenbin Luo. The focus was on encryption with no mention of control systems. The third section was "Network Security Awareness, Management and Risk Analysis" by Dinesh Verma. The Bell Padula model was mentioned but there was no mention of the zones or conduit models being addressed by ISA S99. The fourth section was "Cyber Attacks and Cyber Security" by Hura Gurdeep.  It also does not mention ISA S99. This section is the only one of the four that even mentions control systems when it states: “…The most serious cyber security risks are those that threaten the functioning of critical information infrastructures such as financial services, control systems for utilities, gas, drinking water, and other utilities; transportation, airport and air traffic control systems; logistics systems; and government services.”  However, that is the only place where control systems are mentioned. I will be writing a section that addresses control systems.
Joe Weiss 

Sponsored Recommendations

Make Effortless HMI and PLC Modifications from Anywhere

The tiny EZminiWiFi is a godsend for the plant maintenance engineers who need to make a minor modification to the HMI program or, for that matter, the PLC program. It's very easy...

The Benefits of Using American-Made Automation Products

Discover the benefits of American-made automation products, including stable pricing, faster delivery, and innovative features tailored to real-world applications. With superior...

50 Years of Automation Innovation and What to Expect Next

Over the past 50 years, the automation technology landscape has changed dramatically, but many of the underlying industry needs remain unchanged. To learn more about what’s changed...

Manufacturing Marvels Highlights Why EZAutomation Is a Force to Be Reckoned With

Watch EZAutomation's recent feature on the popular FOX Network series "Manufacturing Marvels" and discover what makes them a force to be reckoned with in industrial automation...