GarrettCom Ethernet Networks and Web Management manual

Secure Industrial Control Utilizing High Speed Ethernet Networks and Web Management GarrettCom, Inc. 47823 Westinghouse Drive Fremont, CA 94539 PH: (510) 438-9071 FAX: (510) 438-9072 www.GarrettCom.com[...]

1 INTRODUCTION This paper explores the state of ne twork security options today at the Ethernet switch level and offers an elementary roadmap for industrial operations to plan for and deploy secure communications systems. Industrial systems need to take advantage of the advanced netw orki ng technologies that can support greater efficiency, reliabi[...]

More and more industrial sites are taking advantag e of Ethernet as a mature, end-to-end, standards- based networking, communications and data transmi ssion protocol because it offers convenience and efficiency that bring higher performance and lower cost. In addition, the sta ndards that are in place support interoperability among many competing e[...]

As Ethernet has expanded into outly ing industrial facilities, two types of network structures emerge: Local and Remote. The Local Ethernet structure is within th e walls of a singl e facility which can be closely watched, with the only serious security risk being from disgruntled employees or persons who have penetrated the physical security of th[...]

be properly addressed, the benefits of controlling the f unctioning of equipm ent in remote locations such as power substations, and linking outlying facil ities such as aircraft maintenance hubs and other far-flung industrial applications. W eb access provid es very significant efficiency im provements and cost-savings, but this is also the area o[...]

(TLS). These features allow an Ethernet switch to handle HyperText Transfer Protocol Secure (HTTPS), the highest level of Web access secu rity available. Other security strategies available to Ethernet eq u ipment include port security, rem ote Telnet access security, password protection and remote unit cut-o ff protection. Appendix B offers a brie[...]

Ethernet switch level, assisting readers in appr eciating the m ultiple levels of industrial network security and the overall complexity required to achieve a highly se cure distributed communications system. REFERENCES Bond, Andrew, “Security Could Put Process Control Under IT”, ControlGlobal.com, The Online Resource of Control Magazine , Apri[...]

APPENDIX A BRIEF OVERVIEW OF SP99 AND PCSRF At the vanguard of developing security guide lines for industrial c ontrol systems are the Instrumentation, Systems, and Automation Society (IS A) and the National Institute of Standards and Technology (NIST). ISA, through its SP99 committ ee, has p ublished two technical reports on manufacturing and cont[...]

• security vulnerabilities addre ssed by this technology; • typical deployment; • known issues and weaknesses; • assessment of use in the manufacturing and control system environment. In addition it discusses anticipated future directions, offers recomme ndations and guidance, and points the reader to information sources and reference mater[...]

APPENDIX B SECURITY STANDARDS IN USE IN ETHERNET INS TALLATIONS The protocols and standards listed below are readily available components that can be used to implement secure Ethernet networks in factories, power substations and other industrial sites. SNMP Simple Network Management Protocol, introduced in 1988, is a standard for gathering and m an[...]

authorized manager, and that the me ssage was not altered in transit. Note that the shared secret key between sending and receiving parties must be prec onfigured by a configurati on manager or a network manager, and loaded into the databases of the various SNMP m anagers and agents. A separate “privacy facility” enables managers and agents to [...]

11 TLS – Transport Layer Security TLS is a successor to SSL, using a wider variety of cryptographic algorithm s for access security. It is standardized by the Internet Engineering Task For ce (IETF). It is a protoc ol that provides secure communication over a TCP/IP connection such as th e Intern et. It uses digita l certificates for authenticati[...]