manualshive.com logo in svg

GarrettCom Ethernet Networks and Web Management, Brochure, Page: 7 / 12

Share
Download
GarrettCom Ethernet Networks and Web Management Brochure Download Page 7

Ethernet switch level, assisting readers in appreciating the multiple levels of industrial network 

security and the overall complexity required to achieve a highly secure distributed communications 

system. 

 

REFERENCES 
 
Bond, Andrew, “Security Could Put Process Control Under IT”, ControlGlobal.com, The Online Resource of 
Control Magazine, April 11, 2005, 

http://www.controlglobal.com/articles/2005/293.html

. 

 
Byres, Eric, “Security Technologies for Manufacturing and Control Systems”, ANSI/ISA-TR99.00.01-2004, 
The Instrumentation, Systems and Automation Society, Research Triangle Park, North Carolina, April, 2004. 
 
Case, J, Mundy, R, Partain, D, Stewart, B, “Network Working Group Request for Comments: 3410”, The 
Internet Society, Reston, Virginia, December, 2002 
 
Herbert, Dan, “Process Control Security”, ControlGlobal.com, The Online Resource of Control Magazine, 
October 23, 2004, 

http://www.controlglobal.com/articles/2004/292.html

. 

 
Melton, Ron, Fletcher, Terry, Earley, Matt, “System Protection Profile – Industrial Control Systems”, Version 
1.0, National Institute of Standards and Technology, Gaithersburg, Maryland, April, 2004. 
 
Merritt, Rich, “What’s in Your Server”, ControlGlobal.com, The Online Resource of Control Magazine, 
February 25, 2005, 

http://www.controlglobal.com/articles/2005/347.html

. 

 
Singer, Brian, “Security Standards:  Those Available Today and Future Directions”,  Proceedings of ISA 
President’s Fall Meeting, Houston Texas, October 4, 2004. 
 
Webb, Bob, “Integrating Electronic Security into the Manufacturing and Control Systems Environment”, 
ANSI/ISA-TR99.00.02-2004, The Instrumentation, Systems and Automation Society, Research Triangle Park, 
North Carolina, April, 2004. 

 

 6

Summary of Contents for Ethernet Networks and Web Management

Page 1: ...Secure Industrial Control Utilizing High Speed Ethernet Networks and Web Management GarrettCom Inc 47823 Westinghouse Drive Fremont CA 94539 PH 510 438 9071 FAX 510 438 9072 www GarrettCom com ...

Page 2: ...ital to ongoing success as has the widespread use of the computer systems which make such attacks so easy and so painful It is no longer enough to catch the perpetrator during or after the commission of a malicious act considerable time and expense is being consumed to address how to secure systems to prevent intrusion Repercussions from the 2003 power blackout in the Northeastern US were felt thr...

Page 3: ...nities and challenges specific to industrial applications At the broadest level the Instrumentation Systems and Automation Society ISA and the National Institute of Standards and Technology NIST are looking at overall security practices for industry See APPENDIX A On a more specific industrial level there are groups such as the North American Electric Reliability Council which has been named by th...

Page 4: ... throughout widely distributed industrial applications Interconnecting multiple water treatment plants or power substations within a metropolitan area are typical examples Remote industrial Ethernet implementations are very popular applications for monitoring the Data Acquisition DA part of SCADA They are typically closed systems which require in facility access points for information review as op...

Page 5: ... in the areas of concern documented by the ISA SP99 committee assuring that a user is who he she claims to be authentication and access authorization for that user encryption and validation as data crosses the Internet so that it cannot be easily accessed and stolen filtering and blocking access control providing audit measurement monitoring and detection tools While Ethernet switch management sof...

Page 6: ... begin to reap the benefits of remote access care must be taken to avoid security breaches Commerce has led the way with highly secure financial medical and retail applications however the complexities of industrial security require careful thought and planning and in many cases a different take on a security strategy User authentication for controlling access and encryption are not only desirable...

Page 7: ...n Virginia December 2002 Herbert Dan Process Control Security ControlGlobal com The Online Resource of Control Magazine October 23 2004 http www controlglobal com articles 2004 292 html Melton Ron Fletcher Terry Earley Matt System Protection Profile Industrial Control Systems Version 1 0 National Institute of Standards and Technology Gaithersburg Maryland April 2004 Merritt Rich What s in Your Ser...

Page 8: ...ultants and cyber security vendors The first two reports from the committee which were published in 2004 are Security Technologies for Manufacturing and Control Systems ISA TR99 00 01 2004 or TR1 and Integrating Electronic Security into the Manufacturing and Control Systems Environment ISA TR99 00 02 2004 or TR2 TR1 provides guidance for using currently available electronic security technologies w...

Page 9: ...he NIST PCSRF s System Protection Profile for Industrial Control Systems SPP ICS released in 2004 is a baseline document that states necessary industrial security requirements at an implementation independent level It will be used to create security specifications for specific systems and components such as a water treatment system or a power substation The NIST PCSRF includes a number of members ...

Page 10: ...3 assures that a received message was transmitted by the entity whose identifier appears as the source in the message header it assures that the message was not altered in transit and that there was not artificial delay or replay It also provides for the ability to update configuration parameters in SNMP agents thus enabling complete remote management of SNMP devices which is an added convenience ...

Page 11: ...l is done by group where a group may be a set of multiple users While SNMPv3 provides secure communications between human managers and the various managed elements in a network it is not enough for security of web based applications For this Secure Socket Layer SSL protocol and its extension the Transport Layer Security TSL protocol extend SNMP features to web based applications SSL Secure Socket ...

Page 12: ...e used to block computers from accessing the network by requiring the port to validate the Media Access Control MAC address against a known list of approved MAC addresses If there is an insecure access on a secondary device connected to a switch these levels of control allow authorized users to continue to access the network while unauthorized packets are dropped Remote Security The further afield...

Reviews:

No comments