hmi scada cybersecurity · 2019-07-26 · hmi scada cybersecurity identify, protect, detect, react...
Embed Size (px)
TRANSCRIPT

HMI SCADA
Cybersecurity IDENTIFY, PROTECT, DETECT, REACT
www.pcvuesolutions.com

The pillars of cybersecurity
PcVue Solutions are committed to securityComputer systems are exposed increasing threats and cyber-attacks with potentially dramatic consequences. The solutions we supply are at the heart of security sensitive environments; in automated process control and in systems designed for the safety and security of people and property. Faced with this reality, it is essential to be diligent in the protection of these systems in order to guard their security.
We are committed to implement security in our solutions at all levels from design to delivery.
We have incorporated the Software Engineering Institute Cyber Risk and Resilience Management into our ISO 9001 Quality Process. Our intention is to be transparent regarding any discovered or reported vulnerabilities as well as the corrective actions to minimize the risk to our customers.
This transparency applies to communication with industry and the public regarding what we learn from participation in the ANSSI working group and other Cyber-Security working groups within the standards organization such as IEC and IEEE. We share our knowledge broadly in order to improve SCADA Cyber-Security for all.
PcVue Solutions offers products and services using technologies that enhance the security of a monitoring and control system based on Cybersecurity pillars defined by the American National Institute of Standards and Technology (NIST).
DID YOU KNOW ?
ARC Informatique was involved in ANSSI working group on cybersecurity
The National Agency for the Security of Informa-tion Systems (ANSSI) is the authority that provides expertise and technical assistance to governments and businesses for information systems security and defense. The ANSSI mission is to respond to threats, contribute to the development of secure products, disseminate security information and provide advice. ARC Informatique participates by working closely with ANSSI to provide feedback and implement the recommendations.
4. Ensure recovery
PcVue Solutions integrates advanced project version control to restore the correct application behavior after an incident:
Protection of data on secure server
Integrity of version
Changes traceability
Possibility of reset to a reference version
3. Detect abnormal and suspicious
behavior of the system
Sentryo ICS CyberVision™ offers advanced sensing solution based on
network behavior.
Analyze Probes connected seamlessly on the network Network protocol analysis and Metadata extraction
(firmware versions, threads ...)
Apprenticeship Creation of reference templates (devices, connections,
protocols, frequency…) based on continuous recording and learning the behavior of the network
Detection Alarms on detection of abnormal behavior compared
in real-time with the network reference templates
2. Limit intrusions and impact through effective protection
PcVue Solutions, in partnership with MOXA, provides hardware protection solution:
Full range of secured industrial Firewall / VPN
Limitation and control of traffic between different areas of the network
Traffic restrictions
Monitoring and diagnostics
In addition to good design methods and application development, PcVue offers advanced software protection features:
Encryption of configuration files
Advanced user rights linked with Active Directory
Connection attempts monitoring
Using encrypted protocols like HTTPS
1. Analyze the system and identify weaknesses
PcVue Solutions offers two complementary software solutions for an "inventory" of system.
Sentryo ICS CyberVisionTM for an advanced diagnostic:
Monitoring data flow transiting on the network, network protocol analysis and metadata extraction (firmware versions, threads, ...)
Inventory of network elements and connections
1. ID
ENTIFY4
. REACT
2. PROTECT
3. DETE
CT
Cyber security
The evolution of Industrial Control Systems (ICS) towards increasingly open architectures, incorporating connected objects and operated by mobile workers induce new threats which must be addressed in the cybersecurity response Benoît Lepeuple – Product Manager
3Cybersecurity / En2 Cybersecurity / En

ARC Informatique Headquarters and Paris office 2 avenue de la Cristallerie 92310 Sèvres - France
tel + 33 1 41 14 36 00 fax + 33 1 46 23 86 02 hotline +33 1 41 14 36 25
[email protected] www.pcvuesolutions.com
ISO 9001 and ISO 14001 certified
© C
op
yrig
ht
2019
. All
rig
hts
res
erve
d. A
ll n
ames
an
d t
rad
emar
ks a
re t
he
pro
per
ty o
f th
eir
resp
ecti
ve o
wn
ers.
Pu
blic
atio
n n
um
ber
: EN
-19
-07-
26
by
Your Independent Global SCADA Provider