HMI SCADA Cybersecurity · 2019-07-26 · HMI SCADA Cybersecurity IDENTIFY, PROTECT, DETECT, REACT...

3
HMI SCADA Cybersecurity IDENTIFY, PROTECT, DETECT, REACT www.pcvuesolutions.com

Transcript of HMI SCADA Cybersecurity · 2019-07-26 · HMI SCADA Cybersecurity IDENTIFY, PROTECT, DETECT, REACT...

HMI SCADA

Cybersecurity IDENTIFY, PROTECT, DETECT, REACT

www.pcvuesolutions.com

The pillars of cybersecurity

PcVue Solutions are committed to securityComputer systems are exposed increasing threats and cyber-attacks with potentially dramatic consequences. The solutions we supply are at the heart of security sensitive environments; in automated process control and in systems designed for the safety and security of people and property. Faced with this reality, it is essential to be diligent in the protection of these systems in order to guard their security.

We are committed to implement security in our solutions at all levels from design to delivery.

We have incorporated the Software Engineering Institute Cyber Risk and Resilience Management into our ISO 9001 Quality Process. Our intention is to be transparent regarding any discovered or reported vulnerabilities as well as the corrective actions to minimize the risk to our customers.

This transparency applies to communication with industry and the public regarding what we learn from participation in the ANSSI working group and other Cyber-Security working groups within the standards organization such as IEC and IEEE. We share our knowledge broadly in order to improve SCADA Cyber-Security for all.

PcVue Solutions offers products and services using technologies that enhance the security of a monitoring and control system based on Cybersecurity pillars defined by the American National Institute of Standards and Technology (NIST).

DID YOU KNOW ?

ARC Informatique was involved in ANSSI working group on cybersecurity

The National Agency for the Security of Informa-tion Systems (ANSSI) is the authority that provides expertise and technical assistance to governments and businesses for information systems security and defense. The ANSSI mission is to respond to threats, contribute to the development of secure products, disseminate security information and provide advice. ARC Informatique participates by working closely with ANSSI to provide feedback and implement the recommendations.

4. Ensure recovery

PcVue Solutions integrates advanced project version control to restore the correct application behavior after an incident:

 Protection of data on secure server

 Integrity of version

 Changes traceability

 Possibility of reset to a reference version

3. Detect abnormal and suspicious

behavior of the system

Sentryo ICS CyberVision™ offers advanced sensing solution based on

network behavior.

Analyze Probes connected seamlessly on the network Network protocol analysis and Metadata extraction

(firmware versions, threads ...)

Apprenticeship Creation of reference templates (devices, connections,

protocols, frequency…) based on continuous recording and learning the behavior of the network

Detection Alarms on detection of abnormal behavior compared

in real-time with the network reference templates

2. Limit intrusions and impact through effective protection

PcVue Solutions, in partnership with MOXA, provides hardware protection solution:

 Full range of secured industrial Firewall / VPN

 Limitation and control of traffic between different areas of the network

 Traffic restrictions

 Monitoring and diagnostics

In addition to good design methods and application development, PcVue offers advanced software protection features:

 Encryption of configuration files

 Advanced user rights linked with Active Directory

 Connection attempts monitoring

 Using encrypted protocols like HTTPS

1. Analyze the system and identify weaknesses

PcVue Solutions offers two complementary software solutions for an "inventory" of system.

Sentryo ICS CyberVisionTM for an advanced diagnostic:

 Monitoring data flow transiting on the network, network protocol analysis and metadata extraction (firmware versions, threads, ...)

 Inventory of network elements and connections

1. ID

ENTIFY4

. REACT

2. PROTECT

3. DETE

CT

Cyber security

The evolution of Industrial Control Systems (ICS) towards increasingly open architectures, incorporating connected objects and operated by mobile workers induce new threats which must be addressed in the cybersecurity response Benoît Lepeuple – Product Manager

3Cybersecurity / En2 Cybersecurity / En

ARC Informatique Headquarters and Paris office 2 avenue de la Cristallerie 92310 Sèvres - France

tel + 33 1 41 14 36 00 fax + 33 1 46 23 86 02 hotline +33 1 41 14 36 25

[email protected] www.pcvuesolutions.com

ISO 9001 and ISO 14001 certified

© C

op

yrig

ht

2019

. All

rig

hts

res

erve

d. A

ll n

ames

an

d t

rad

emar

ks a

re t

he

pro

per

ty o

f th

eir

resp

ecti

ve o

wn

ers.

Pu

blic

atio

n n

um

ber

: EN

-19

-07-

26

by

Your Independent Global SCADA Provider