Customers want the whole control system to meet their cyber requirements and this includes all equipment from the HMI to Controllers, including networking equipment.

Typically vendors will focus on either the controllers or HMIs, not always both due to the different authentication methods typically utilized. However, Electrification has developed a simple security management suite that optionally provides proxy services from a customer active directory to user access on the HMI and Controllers.

This allows existing user accounts to be used on the Windows HMI terminals, and also a centralized location for access to controllers (role based as per IEC62351-8).

This logical and physical disconnection from the enterprise active directory allows the control system to operate unaffected if the enterprise system is attacked and includes Syslog services to ensure all access is logged.

The Security management suite (SMS) is a companion to our ICSGuard that monitors all the controllers and HMIs in our systems to ensure early attacker reconnaissance is detected as per NIST SP 800-94 HIDS.

For more detail on what our HMI offers regarding cybersecurity controls, feel free to reach to us at contact us.

A network-based intrusion detection system (NIDS) detects malicious traffic on a network. As per the MITRE ATTACK framework shown above, several tactics and techniques are used to attack a control system. Typically NIDS are able to detect attacks early in the attack chain. Once the attacker has reached the "inhibit response state" it is almost impossible for a NIDS to detect them. ICSGuard however is designed to fill this gap in the detection chain. ICSGuard is an important part of a defense in depth architecture, protecting the heart of the control system. ICSGuard performs prediction and detection of attacks and faults based on behavioral analysis of the controller by using patented machine learning algorithm.

ICSArmor - A dedicated Security Appliance, enabling defence-in-depth across the Electrification control system. Enabling system compliance with IEC 62443 4-2 3-3 and IEC 62351-8, ICSArmor gives owners and operators easy access to Electrification’s security toolchain. ICSArmor provides an intuitive and secure interface to host and utilize Electrification’s security toolchain and optional, embedded third party software.

ICS Security Management Suite with SYSLOG - ICS Security Management Suite provides a central system authentication server to manage users across the Electrification OT network, in accordance with IEC 62351-8. ICS Security Management Suite deploys and manages system trust certificates using a PKI with an optional customer-provided root CA. ICS SYSLOG, in accordance with RFC 5424, collates and stores OT network SYSLOGs with the ability to integrate with a third party SIEM.

ICSGuard - ICSGuard is a unique patented and integrated health and security monitor for your controller, equipped with machine learning capabilities. ICSGuard serves as a host intrusion detection system (HIDS) in accordance with NIST 800-94. ICSGuard utilizes the various HPCi diagnostic pointers and virtual sensors for monitoring controller behavior during operation. For HMI workstations the MITRE ATT&CK framework is used in combination with Windows OS security event logs to detect threats and anomalies. Upon detection of abnormal events, ICSGuard will then alert the operators.