SMART BUILDINGS & IOT FEATURE Tightening IoT security with software
Power grids are fast becoming digital jungles. Here, Martyn Williams, managing director of energy software expert COPA-DATA UK, explains how software is playing an important role in securing networks from hackers and protecting data
S
takes are high in the energy sector. In fact, it is one of the only industries in
which cyber security is entangled with public safety and environmental concerns. Digitalisation in this sector provides huge efficiency benefits, but also presents risks. Cyber criminals are now looking for gaps in security measures, and IoT devices can provide an opportunity to infiltrate these networks. In 2017, Energy UK called for a collaborative approach to cyber security in the industry. One of the objectives was to encourage security vendors to work closely with operators to ensure products are fit for purpose. During the same period the Cyber
Security in the Energy Sector report by the Energy Expert Cyber Security Platform (EECSP) was released. The group identified 39 gaps in energy cyber security that were not covered by existing legislations. Alongside calls from trade associations like Energy UK, the report demonstrated a need for a flexible framework that addresses and mitigates current and future security vulnerabilities in energy automation. Shortly following this, the ISA/IEC
62443 series of standards were released H
and adopted globally by the International Electrotechnical Commission (IEC). The standard provides a baseline to unite all perspectives — that of the component supplier, systems integrator and equipment operator. TÜV SÜD recently awarded the new
ISA/IEC 62443-4-1:2018 security standard to COPA-DATA, for its software development, quality assurance and support processes used for energy automation software, zenon. Certifications like these are particularly
beneficial for the UK energy sector as entire power grids are often networked using HMI and SCADA systems powered by software like zenon. Energy grids are
igh-tech production plants that ‘think for themselves’, that plan things automatically and that optimise maintenance work through artificial
intelligence, might sound like a futuristic sci-fi film, but it is fast becoming a reality at Rittal’s manufacturing plant in Rittershausen, Germany. To produce its new VX25 large enclosure system, Rittal is transforming its
production plant ‘on the fly’ into a highly-advanced enclosures factory, populated by welding and handling robots. Half the conversion work has already been completed and the Industry 4.0 manufacturing unit is expected to be finished by 2020.
Rittal
rittal.com P
ower conversion specialists, Ideal Power, launch their latest design through their alliance with P-DUKE. The 43TAC15USxxy-zz open frame 15W AC/DC PSU series has been specifically developed for industrial applications, including industry 4.0. The series is well suited to industrial applications, which are now abundant with connected infrastructure; using smart machines and intelligent communication systems. These expose factories, production centres and field based industrial, agricultural and forestry vehicles to in-depth analysis and diagnostics for greater efficiency and performance. The 43TAC15USxxy-zz series provides a reliable power solution in
applications where harsh conditions are a concern; featuring an MTBF (MIL-HDBK-217F @full load) of over 3,000,000 hours and meeting environmental standards IEC 60068-2-27 & 60068-2-6 (shock and vibration performance). The module is also available with a choice of either Class I or Class II protection, as required, and comprises of over voltage, over load and short circuit protection.
Ideal Power
idealpower.com ELECTRICAL ENGINEERING | DECEMBER/ JANUARY 2019 31
increasingly using centralised software to visualise and control their operations, linking critical infrastructure and the cyber world. While this connectivity is valuable, it automatically increases cyber security risks in all networked equipment. Therefore, it is necessary that the software at the centre of it all is trusted — and this trust is certified by a third- party standard. The certification requires companies to check the potential weaknesses of their automation and control technologies, and then demonstrate they have developed effective protection measures. The requirements are comprehensive, and in the case of COPA-DATA, required the formation of a Security Management Team (SMT). In particular, the team introduced threat models to search for structural vulnerabilities from the point of view of an attacker. To secure their networks in today’s turbulent energy sector, it is vital that operators are armed with software that is designed in line with current industrial IT security guidelines.
COPA-DATA UK
copadata.com
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44
