IT Security in Process Automation - Top Ten

(1)

Dr. Gerd Wartmann Slide 1

06/04/2005

Field Devices, Services and Maintenance

(2)

06/04/2005

Content

Why is this important ?

Security Measures in /for devices: Field Devices

Panel Devices

Inventory Control / Remote Services

Web enabled asset management

What is needed The Risk Model

(3)

06/04/2005

Why is Information Security important ?

New technologies – new risks (wireless, IT, WEB …) Openness of the communication, e.g. Ethernet

Access to company networks from outside (outsourcing / remote clients )

Know how protection

Internal attacks : disgruntled employees (FBI Study) External attacks – Vandalism, Terror,

DNS / viruses / worms, backdoors / masquerade / corruption … Legal Requests e.g. pharmaceutical and food industry: 21 CFR part 11

(4)

06/04/2005

There was always the necessity to protect company assets against all kind of threats: misuse, theft, tampering, unauthorized changes, vandalism ..

With the use of more IT and more open communication technologies

Information Security is coming more important to guarantee dependable plant operation.

(5)

06/04/2005

Process automation architecture

P View FieldCare

W@M

ControlCare Application Designer

Ethernet

(6)

06/04/2005

Process automation architecture

W@M

Ethernet

Field Controller

(7)

06/04/2005

Access Control Devices

Access based on “Roll Concept” Operator

Maintenance

Expert

….

Password

Read: all (but service ) Write, if allowed

Key locking

Experience:

Default passwords Or device is left open

(8)

06/04/2005

Process automation architecture

W@M

Ethernet

(9)

06/04/2005

Panel Devices - FDA

Part 11

21 CFR part 11: (among many other requests)

(10)

06/04/2005

Panel devices - FDA

Electronic signature conform with FDA 21 CFR part 11

ID- / password combination assignable to a unique individual.

Preset password length for user and administrator.

Default password must be changed Password must be changed after 30, 60 or 90 days.

Audit Trail for successful or unsuccessful login attempts

Rear panel is protected against manipulation via light barrier

(11)

06/04/2005

Process automation architecture

W@M

Ethernet

Remote Access

via Fieldgate

(12)

06/04/2005

Inventory Control and Remote Service

ethernet Fieldgate with

enclosure

Internet

consumer site producer site

remote setup with ToF-Tool via Fieldgate HARTclient Endress+Hauser Firewall Workstation LAN Firewall Workstation LAN LAN Firewall e-business server

1 of 4 tanks for chemicals monitored with Micropilot M

(13)

Dr. Gerd Wartmann Slide 13 06/04/2005 TCP/IP LAN (Intranet) WAN (Internet) Telephone GSM Ethernet

+

Fieldgate

Field

Office world

Nivotester FTC625

Remote Access with Fieldgate Technology

Security Aspects

Access control by password; transfer encrypted

User defined access rights

No parameterizations from the WEB if HW locked

Hardware switch (no read/write); unlocking at the device only Point-to-point via GSM or phone line

(14)

Dr. Gerd Wartmann Slide 14 06/04/2005 Workstation LAN Ethernet Fieldgate Ethernet Fieldgate Fieldgate Portal Workstation Server Internet Workstation Workstation Server Workstation LAN

VPI Agent Software

• runs in the background on a workstation or a server • uses standard http-port of

proxy-servers

• establishes VPN connection to the portal

• knows only the configured Fieldgates in the LAN • relays requests to the portal

to the appropriate Fieldgate

Login to portal (https) VPN Firewall Firewall Firewall

Fieldgate Portal

(15)

06/04/2005

Process automation architecture

W@M

Ethernet

(16)

JA Salusbury Slide 16 06/04/2005

W@M System concept

Field

Remote I/O, Drives, Field devices

Supervisory Control

Visualization, Monitoring and Control

Management

Plant Asset Management

Pl ant A cc es s Po int s

FieldCare Plant Asset Management Installed Base Assistant (IBA-C) W@M connectivity via Internet Access W@M Portal

via Internet Access

FieldCare Local Maintenance and Configuration

Local Area Network (LAN) Wide Area Network (WAN) / Internet

(17)

06/04/2005

W@M Security Aspects

Data protection against loss

redundant memory system

Backup / kept safe at a secure place

daily within the scope of a disaster recovery backup

mirrored on an identical memory system in the emergency computer

Data protection against unauthorized access

Authentication by user name and password client separation

Data encryption (SSL / HTTPS) Multi-level firewall concept Regular security audits

Availability

twenty-four-seven

(18)

06/04/2005

The Risk Model

Risk =

Threat

x Vulnerability

Countermeasures

x Value

Is what we are doing sufficient?

International harmonized and accepted standards are needed: Activities are numerous: ISA, IEC, NAMUR, DKE …

Common methods to evaluate security measures, IT office == IT industrial (needs own set of rules), Bundling the know how,

(19)

06/04/2005