ABB’s AC 800M controller achieves Achilles Level 1 cyber security certification

Sept. 12, 2007

Wickliffe, Ohio, September 12 – ABB announced today that its System 800xA Extended Automation AC 800M controller recently achieved Achilles Controller Level 1 cyber security certification. Wurldtech Security Technologies introduced its Achilles Controller Certification Program earlier this year.

The Achilles testing process is very rigorous –according to Wurldtech, the majority of controllers submitted have failed Level 1 Certification testing, and a substantial number have still not passed on retest. The AC 800M controller passed each of the over 30 million individual tests required to achieve Achilles Level 1 Certification.

“Cyber security is one of the most challenging issues that today’s automation customers must consider when evaluating their control system strategies; the Achilles certification program assures these customers that their automation system has the quality, reliability and robustness needed to resist a potential cyber incident,” said Alicia Bauer, Director of Systems Marketing, ABB Inc. “We have pursued Achilles certification for the AC 800M controller as part of our ongoing commitment to provide our customers with trusted, high-integrity solutions that help them operate more safely, securely and productively.”

Over the past decade, critical equipment used in the control of power generation and distribution, oil production, transportation, manufacturing and other critical processes has become increasingly interconnected through the use of technologies such as Ethernet, TCP/IP and various web services. While this has brought considerable benefit in the form of improved information flows and efficiency, it also exposes these systems to the possibility of attack from viruses, hackers and terrorists from around the world. Because of this, the industrial controls industry is experiencing pressure from government and industry to meet ever-growing regulatory and security compliance requirements.

Wurldtech and its partners developed the Achilles Certification Program to provide a benchmark for the certification of secure industrial controllers. The certification process presents device manufacturers with an independently verified result from which to communicate their product security to customers, while providing operators of control systems the most complete, accurate and trustworthy information currently possible on the security of their deployed products. Achilles Level 1 Certification verifies the security, reliability and robustness of a device’s implementation of OSI layers 2 – 4, including Ethernet, ARP, IP, ICMP, TCP and UDP.