The Department of Homeland Security (DHS) is tasked with many things. One area of focus is Industrial Control Systems (ICS). The Industrial Control Systems Joint Working Group (ICSJWG) was formed to facilitate this focus. This group holds semi-annual conferences (Spring and Fall) in various US cities. These meetings…
exida explains Blog
Entries tagged with: Cybersecurity
- by John Yozallinas, CFSE
- Thursday, June 07, 2012
- Industrial Cybersecurity
(Almost) FREE Security Training
- by Dr. William Goble, CFSE
- Thursday, January 12, 2012
- News
2011…A Year in Review
2011 was a good year in many ways for Functional Safety and Cyber Security. Several instrumentation products achieved IEC 61508 certification. exida Certification alone issued 64 product certifications (http://www.sael-onine.com). With most certification projects, improvements to the design and quality are made. Some manufacturers…
- by Dr. William Goble, CFSE
- Thursday, December 20, 2012
- CertificationIndustrial Cybersecurity
2012 - Good Progress for Cybersecurity and Functional Safety
Product Certification
Over 60 new products received functional safety or cybersecurity certification this year. Those products and more…
- by Michael Medoff , CFSE, CISA
- Thursday, June 21, 2012
- Industrial Cybersecurity
A False Sense of Security
About 5 years ago I was sitting around a big table in a conference room at a major LNG terminal. Outside the window I could see a big city harbor filled with boats, bridges, sky scrapers and approximately 5 million people. I could also see two huge LNG storage…
- by Dr. William Goble, CFSE
- Tuesday, January 26, 2016
- Certification
A Year in Review: Functional Safety and Cybersecurity in 2015
Good things happened in the fields of functional safety and control system cybersecurity in 2015. I am not going to include the exciting new Star Wars movie as an event in the list as it does not really fit into the topic. But keeping focused, my highlights is 2015…
- by Michael Medoff , CFSE, CISA
- Friday, July 19, 2013
- Industrial Cybersecurity
Are Cybersecurity Servers Making Your ICS Less Cyber Secure?
ICS cybersecurity standards such as ISA 62443 (formerly ISA 99) and NERC CIP require operators to have policies and procedures in place to monitor and maintain their critical ICS cyber assets. For anything other than very small systems, the obvious choice is to implement systems…
- by Patrick O'Brien
- Thursday, February 18, 2021
- Industrial Cybersecurity
Attack on Florida Water System Highlights Weak Security Protections for Critical Infrastructure
The Oldsmar Water Treatment Facility in Pinellas County Florida was compromised by hackers on February 5th. Hackers took advantage of the TeamViewer application that was still installed on the water facilities network to gain remote access1. The TeamViewer was originally installed to allow for status checks and troubleshooting of…
- by Dave Gunter
- Thursday, August 31, 2017
- Industrial Cybersecurity
Contractor Cybersecurity Training - Why Do You Need It?
Today, we are going to talk a little bit about Contractor Cyber Training. What's in a good contractor cyber training course? Why do you need one? Why aren't policies, practices, and contract language enough?
Today's operators of industrial production facilities frequently utilize contract…
- by Patrick O'Brien
- Tuesday, November 20, 2018
- Industrial Cybersecurity
Cyber Risk Assessments and Security Level Verification: Detailed Risk Assessments (Part 2 of 3)
The exposure of industrial facilities to cybersecurity threats has never been higher. An analysis performed by IBM security found that the number of attacks on SCADA systems increased 636% from 2012 to 2014, with 675,816 cybersecurity incidents in January 20141. Finding an effective method for evaluating the current level…
- by Michael Medoff , CFSE, CISA
- Tuesday, July 16, 2013
- Industrial Cybersecurity
Cyber Security, Beyond the Internet: An Automation Engineer’s View
The world of automation has changed significantly over the past 30 years. I have fond memories of starting my career by calibrating, adjusting, and tuning pneumatic control loops while working my way through the electronic age right up to the present digital and cyber generation of automation. If you…
- by Dave Gunter
- Thursday, June 08, 2017
- Industrial Cybersecurity
exida Cyber Blog Series 03 - Process Safety and Cybersecurity, Related or Still Distant Cousins?
To be clear, the above title is meant to capture your attention. We all understand and know that it is unusual for a Process Safety engineer and the IT architect to possess detailed knowledge of both safety and security. In today’s world, the operators, engineers, design and support personnel of…
- by Dave Gunter
- Thursday, July 06, 2017
- Industrial Cybersecurity
exida Cyber Blog Series 04 - Cybersecurity Metrics, Diagnostics, and Alarms: What’s What?
Co-written by Todd Stauffer, Director of Alarm Management Services at exida
A wise man once said, “You can’t manage what you don’t measure.” Let's apply this to the world of cybersecurity to discuss the importance of cybersecurity metrics and how they are different from a cyber diagnostic and a…
- by Dr. William Goble, CFSE
- Friday, January 10, 2014
- Certification
Functional Safety, Cybersecurity, and Alarm Management in 2013
2013 was a good year for functional safety progress. exida Certification issued a record number of new product functional safety certifications in mostly every product category - valves, actuators, solenoid valves, PLCs, fire and gas sensors, process sensors, and components. The component category is one of the most…
- by Rick Smith
- Thursday, August 20, 2015
- Industrial Cybersecurity
How Cybersecurity is like a Goldfish
Oh look! Squirrel!
I am not much of a blogger. I should be but I’m not. This is strange, because I always have plenty to say.
This subject just gets me going so I am writing about it. I welcome feedback and opinions.
I have been in cybersecurity in…
- by Michael Medoff , CFSE, CISA
- Monday, July 23, 2018
- Industrial Cybersecurity
IEC 62443 : The Road to More Secure Products
As the incidence of cybersecurity threats in automation systems continue to rise, the automation world continues to grapple with how to address these issues. There are many good practices published in the IEC 62443 series of standards available to end users such as creating demilitarized zones between the business…
- by Michael Medoff , CFSE, CISA
- Wednesday, June 01, 2011
- Industrial Cybersecurity
Industrial automation is in the cross hairs of the hacker
As the details of STUXNET’s design unfolded last fall, like many, I was truly impressed by the pin-point precision that the malware authors used to ensure that their target, and only their target, was impacted by the virus. In this regard, STUXNET may be one of the…
- by Michael Medoff , CFSE, CISA
- Tuesday, October 30, 2012
- Industrial Cybersecurity
Industrial Control System Cyber Security – Legislation and Standards
There is a lot of concern around cyber security in Industrial Control Systems. With new threats like Stuxnet and Flame, the perceived risk to critical infrastructure has increased dramatically. There are increased calls for legislation and new methods for dealing with these threats. The history of how we have…
- by Rick Smith
- Wednesday, August 24, 2016
- Industrial Cybersecurity
Introduction to ICS Security - Pt. 1 - What is ICS Security and Why it Is Important
Over the next couple of blogs, I plan to map out the importance of ISA/IEC-62443/ISA-99 based cybersecurity and how it applies to your work environment. I'll also explain some of our services so that you can see what might pertain to you.
For part 1, I will start from the beginnning…
- by Rick Smith
- Thursday, October 27, 2016
- Industrial Cybersecurity
Introduction to ICS Security - Pt. 4 - Control System Assessments
Over the last couple of blogs, I mapped out the importance of ISA/IEC-62443/ISA-99 based cybersecurity and how it applies to your work environment.
For part 1, I started from the beginning and outlined what exactly ICS cybersecurity is and why it is important.
For part 2, I explained the difference between…
- by Michael Medoff , CFSE, CISA
- Wednesday, August 10, 2011
- Industrial Cybersecurity
Keeping “Dancing Monkeys” out of your PLC
Last week a security researcher, Dillon Beresford of NSS Labs, presented at the Blackhat conference on the security vulnerabilities he found in Siemens PLC firmware. One of many stories on Dillon’s findings can be found here. Among other things, Dillon found “dancing monkeys” in the code! Actually,…
-
{e2c518d61874f2d4a14bbfb9087a7c2dprevious_page}
- « Previous {/e2c518d61874f2d4a14bbfb9087a7c2dprevious_page}
- 1
- 2 {e2c518d61874f2d4a14bbfb9087a7c2dnext_page}
- Next » {/e2c518d61874f2d4a14bbfb9087a7c2dnext_page}