Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $9.99/month after trial. Cancel anytime.

    Industrial Network Security, Second Edition
    Industrial Network Security, Second Edition
    Industrial Network Security, Second Edition
    Ebook177 pages1 hour

    Industrial Network Security, Second Edition

    By David J. Teumim

    3/5

    ()

    Read preview

    About this ebook

    Nowadays one only needs to read the newspaper headlines to appreciate the importance of Industrial Network Security. Almost daily an article comes out describing the threat to our critical infrastructure, from spies in our electrical grid to the looming threat of cyberwar.Whether we talk about process control systems that run chemical plants and refineries, supervisory control and data acquisition (SCADA) systems for utilities, or factory automation systems for discrete manufacturing, the backbone of our nation’s critical infrastructure consists of these industrial networks and is dependent on their continued operation.This easy-to-read book introduces managers, engineers, technicians, and operators on how to keep our industrial networks secure amid rising threats from hackers, disgruntled employees, and even cyberterrorists. - See more at: https://www.isa.org/store/products/product-detail/?productId=116268#sthash.LbVe683g.dpuf
    LanguageEnglish
    PublisherInternational Society of Automation
    Release dateFeb 15, 2016
    ISBN9781941546109
    Industrial Network Security, Second Edition
    Author

    David J. Teumim

    David J. Teumim’s background includes corporate security and web project management positions with Agere Systems and Lucent Technol-ogies, along with 15 years of process, project, control, and safety work for Union Carbide Corp, British Oxygen, and AT&T. His association with ISA began in early 2002 when he chaired ISA’s first technical conference on Industrial Network Security in Philadelphia, PA, and taught the first ISA seminar on this subject. Since 2004, his firm, Teumim Technical, LLC, has provided industry outreach for three U.S. Department of Energy National SCADA Test Bed projects, consulting for Sandia National Laboratories. More recently, he has chaired an American Public Transportation Associa-tion’s Working Group on Control and Communications Security. Teumim holds a master’s degree in chemical engineering and is certified as a Certified Information System Security Professional (CISSP). He resides in Allentown, PA.

    Related to Industrial Network Security, Second Edition

    Related ebooks

    Technology & Engineering For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Hacker’s Manual

      Mar 2, 2021

      Hacker’s Manual
      1 min read

    • Article

      Cyber Security IS A SHARED RESPONSIBILITY AT THE C-LEVEL

      Sep 21, 2016

      Data breaches can have far-reaching repercussions; protecting against them is a companywide mandate

      2 min read

    • Article

      In Cyberwar There Are No Rules

      Sep 10, 2018

      In Cyberwar There Are No Rules
      13 min read

    • Article

      How It Secures The Data?

      Jul 1, 2021

      How It Secures The Data?
      1 min read

    • Article

      Security And Access Guide

      Feb 25, 2018

      Security And Access Guide
      8 min read

    • Article

      Vulnerability Assessments

      Jan 7, 2021

      Vulnerability Assessments
      3 min read

    • Article

      Modern Hacking, Ethics And Statistics

      May 31, 2022

      Agerund and an infinitive walk in to the Linux kernel. They were hacking to learn. An awful adaptation of a (drinking to forget) joke, but a reasonable opener. An incredibly useful maxim from long ago hacker lore is “don’t learn to hack, hack to lear

      5 min read

    • Article

      All about Ethernet

      Jan 11, 2021

      All about Ethernet
      4 min read

    • Article

      The Attacks You Should Be Worried About

      May 7, 2022

      Every few months, a high-profile vulnerability comes along that grabs the media spotlight, but in many cases these aren’t the threats you need to be focusing on. As Lewis Pope, “head security nerd” at N-able, points out, a vulnerability with a Common

      2 min read

    • Article

      An Epic Fail

      Jul 26, 2024

      Over all the chaos from the global IT failure hung a question: how did a flawed update to Microsoft Windows software bring large swathes of society to a screeching halt? The problem originated with an Austin, Texas-based cybersecurity firm called Cro

      2 min read

    • Article

      The Attacks You Should Be Worried About

      Aug 8, 2022

      Every few months, a high-profile vulnerability comes along that grabs the media spotlight, but in many cases these aren’t the threats you need to be focusing on. As Lewis Pope, “head security nerd” at N-able, points out, a vulnerability with a Common

      2 min read

    • Article

      The Weakest Link

      Jun 24, 2018

      The Weakest Link
      7 min read

    • Article

      Software Beats Power Grid Hackers In Security Tests

      Feb 22, 2018

      Hacker-resistant software for controlling a power grid performed well in both a simulated cyber-intrusion and in a tryout in a real power plant, its developers say. Though the Honolulu power plant where the tryout occurred was not generating electric

      3 min read

    Related categories

    Reviews for Industrial Network Security, Second Edition

    3/5

    2 ratings1 review

    What did you think?

    Tap to rate

    Review must be at least 10 words

    • 1/5
      Outdated. Doesn't deal with latest thinking and technologies. Doesn't provide much in the way of technical guidance or IEC 62443

    Book preview

    Industrial Network Security, Second Edition - David J. Teumim

    Author

    Preface

    So much has happened since the first edition of Industrial Network Security was published in 1995. This area has gone mainstream in terms of public awareness of the importance of Industrial Networks to our critical infrastructure and the threat to them from hackers, cyberspies, and cyberterrorists.

    For instance, the story America’s Growing Risk: Cyber Attack is featured on the cover of the April 2009 Popular Mechanics. And one of the lead stories on the front page of the 8 April 2009 edition of The Wall Street Journal was Electricity Grid in U.S. Penetrated By Spies. The story talked about how foreign powers had mapped the U.S. electrical grid and left behind some rogue programs that could be activated remotely to disrupt the grid.

    The Big R, Regulation, has reared its head in the electric power industry. The NERC-CIP control system cybersecurity standards for electric power generation and transmission entities are now mandated by the U.S. government.

    Commercial-off-the-shelf (COTS) hardware and software, as described in Chapter 3, continues its move into Industrial Networks as legacy equipment is phased out. And other sectors, such as passenger rail, described through the writer’s eyes in the new Chapter 9, are coming up to speed on Industrial Network Security as COTS become commonplace in that sector control systems.

    Consistent with the first edition, an effort has been made to keep this book introductory and easy-to-read. As with the first edition, this edition is intended for the technical layman, manager, or automation engineer without a cybersecurity background. New cyber incidents and updated information have been added to the chapters without changing the original format.

    1.0

    Industrial Network Security

    1.1What Are Industrial Networks?

    To define industrial network security, one first has to define industrial networks. For the purposes of this book, industrial networks are the instrumentation, control, and automation networks that exist within three industrial domains:

    •Chemical Processing – The industrial networks in this domain are control systems that operate equipment in chemical plants, refineries, and other industries that involve continuous and batch processing, such as food and beverage, pharmaceutical, pulp and paper, and so on. Using terms from ANSI/ISA-84.00.01-2004 Part 1(⁶), industrial networks include the Basic Process Control System (BPCS) and the Safety Instrumented Systems (SIS) that provide safety backup.

    •Utilities – These industrial networks serve distribution systems spread out over large geographic areas to provide essential services, such as water, wastewater, electric power, and natural gas, to the public and industry. Utility grids are usually monitored and controlled by Supervisory Control And Data Acquisition (SCADA) systems.

    •Discrete Manufacturing – Industrial networks that serve plants that fabricate discrete objects ranging from autos to zippers.

    The term Industrial Automation and Control Systems (IACS) is used by ISA in its committee name and in the recently issued standards and technical report series from the ISA99 Industrial Automation and Control Systems Security standards and technical committee (also, simply ISA99). This term is closely allied with the term Industrial Networks.

    The standard, ANSI/ISA-99.00.01-2007-Security for Industrial Automation and Control Systems, Part 1(¹), defines the term Industrial Automation and Control Systems to include control systems used in manufacturing and processing plants and facilities, building environmental control systems, geographically dispersed operations such as utilities (i.e., electricity, gas, and water), pipelines and petroleum production and distribution facilities, and other industries and applications such as transportation networks, that use automated or remotely controlled or monitored assets. This standard will be referred to as ISA-99 Part 1 in the book.

    The technical report ANSI/ISA-TR99.00.01-2007 Security Technologies for Industrial Automation and Control Systems (⁴) succeeds the 2004 version of the document referenced in the first edition of this book. This report will be referred to as ISA-99 TR1. Note: At the time of this writing, Part 2 of the ISA-99 standard has just been approved. Part 2 is titled Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program(⁵).

    1.2What Is Industrial Network Security?

    When we speak of industrial network security, we are referring to the rapidly expanding field that is concerned with how to keep industrial networks secure, and, by implication, how to keep the people, processes, and equipment that depend on them secure. Secure means free from harm or potential harm, whether it be physical or cyber damage to the industrial network components themselves, or the resultant disruption or damage to things that depend on the correct functioning of industrial networks to meet production, quality, and safety criteria.

    Harm to industrial networks and to the related people, processes, or equipment might be through the following:

    •Malicious Acts – Deliberate acts to disrupt service or to cause incorrect functioning of industrial networks. These might range from a denial-of-service attack against a Human-Machine Interface (HMI) server to the deliberate downloading of a modified ladder logic program to a PLC (Programmable Logic Controller).

    •Accidental Events – These may be anything from a fat-fingered employee hitting the wrong key and crashing a server to a power line surge.

    When we think of industrial networks and computer-controlled equipment, we usually think of what ISA99 documents call electronic security, but we should also include some aspects of two other branches of security: physical security and personnel security. These other two branches of security will be addressed in Chapter 2.

    To illustrate the distinction, let’s say we have a disgruntled employee who vents his anger in a chemical plant and:

    1.turns a virus loose on the computer workstation that runs the HMI software, allowing the virus to spread through the industrial network;

    2.takes a pipe wrench and breaks a liquid level sight glass on a storage tank, causing the liquid to leak out on the floor; and

    3.pries open the door to an SIS system controller box and disables the overpressure shutdown by installing jumpers between isolated conductors and bypassing the audible alarms.

    By our definition, acts 1 and 3 fall within our definition of industrial network security. Act 2 is deliberate sabotage, but it is physical sabotage of a mechanical indicating instrument, not of an industrial network. Act 3 involves some physical actions, such as breaking the lock and installing jumpers, but the jumpers then alter the electrical flow within an industrial network, a SIS system.

    We acknowledge and stress the importance of physical protection of industrial network components, and also the personnel security that applies to the operators of these networks. However, physical and personnel security protective measures have been around for a long time, and information about these protective measures is readily available elsewhere. Chapter 2 introduces physical and personnel security as part of the entire security picture; however, the majority of this book covers the electronic security of industrial networks.

    The ISA99 committee also acknowledges that these other branches of security, such as physical and personnel security, are necessary but similarly states that its standards are mainly concerned with the electronic security of industrial automation and control systems.

    1.3The Big Picture: Critical Infrastructure Protection

    It is best to introduce the subject of Critical Infrastructure Protection from a historical perspective. In 1996, President Clinton issued PDD63 (Presidential Decision Directive 63) on Critical Infrastructure Protection(²), declaring that the United States had critical infrastructure that is vital to the functioning of the nation and must be protected. PDD63 identified eight critical infrastructure sectors, including these infrastructures using industrial networks:

    •Gas and Oil Storage & Delivery

    •Water Supply Systems

    •Electrical Energy

    Along with these three were also government operations, banking and finance, transportation, telecommunications, and emergency services.

    In February 2003, President Bush released The National Strategy to Secure Cyberspace(³). In it, some additional critical sectors were listed that use industrial

    Enjoying the preview?
    Page 1 of 1