Chemical Engineering May 2016 - 23

Emerson Process Management
Software
Internet
Firewall
Historian
server
Firewall
Level 3 - DMZ layer
Level 2.5
Pro plus
station
Application
station
Operator
station
ePO agent
handler
Level 2 - ACN
Figure 2. The DeltaV reference architecture includes the managed whitelisting protection based on the
Intel Security Application Control for DeltaV workstations
dentally infect the control system, "
Peterson explains.
Adding to the complexity and
severity of the situation, says Vincent
Turmel, industrial cybersecurity
consultant with Siemens Industry
Services (Alpharetta, Ga.; www.
siemens.com), is that it's often difficult
to patch or upgrade the equipment
found on the operations side.
" On the plant floor, PCs are used for
a long period of time, so you often
end up with a lot of older systems
and various levels of legacy products
that have different protection requirements
and a range of patches and
protections in place, " notes Turmel.
" One of the greatest cybersecurity
risks we encounter is trying to patch,
maintain and defend the PCs on the
plant floor. One size does not fit all
when it comes to protecting PCs on
the operations technology (OT) side. "
In addition, equipment used for
operations is often tied into a larger
system where, if you upgrade one
part of the system, you have to upgrade
all of it, which then becomes a
cost issue, Turmel continues. " what
this means is that even a common
virus that's been eradicated on the
IT side, can wreak havoc on the
OT side, due to the various ages of
equipment and operating systems
found on the plant floor. "
" Sometimes it feels like the only
way to secure a computer after it has
been connected to the network is to
unplug it and throw it into a lake, "
jokes Peterson. However, he is quick
to add that cyber attacks on industrial
facilities are no laughing matter
as they may result in loss of assets
and production dollars, theft of intellectual
property or endanger the
health and safety of employees and
the environment.
Is the CPI at higher risk?
" we do see the risk for very specific
attacks that can occur via PCs in
today's automation space, " agrees
Anthony Baker, security leader with
rockwell Automation (Milwaukee,
wis.; www.rockwellautomation.
com). " Many of those attacks leverage
known vulnerabilities in industrial
control systems where owners of the
systems have not been able to patch
and maintain the systems used in
their production space, " says Baker.
" when we talk to our customers
about possible risks, we like to point
out those concerning intellectual
property because they are often not
considered and are very applicable
for the chemical industry in the form
of recipes, process and information, "
says Baker. " However, the more significant
concerns are related to the
risks associated with the integrity of
their operations. If an attacker decides
to tamper with operations or equipment,
it may cause critical damage
that jeopardizes production availability.
But the most significant and frightening
issues include attacks that would
impact the safety of personnel, people
in the vicinity or the environment. "
So, are the chemical process industries
(CPI) at a greater risk for these
types of targeted attacks than other
industries? " while we can't know for
sure how likely there is to be an attack
on any given plant or what type
of attack it might be, we do know
ChemiCal engineering www.Chemengonline.Com may 2016
InnovaMass
is available
in the 240i inline
model above
and the 241i
insertion model
to the right with
optional probe
retractor
Data
server
ePO
console
Generic FTP
Application
Whitelisting: McAfee integrity control
McAfee ePO: Management console
McAfee Agent
Level 4 - local LAN
InnovaMass.
Reinvented.
The revolutionary Sierra Vortex
iSeries has arrived.
With the new InnovaMass® iSeries
volumetric or multivariable mass vortex
flow meter, your gas, liquid, and steam
measurements are now easier to
manage and more accurate for optimum
cost-effectiveness. And the iSeries is
field adjustable and upgradable.
It Has Apps.
Now You Have
the Power.
* ValidCal Diagnostics™ delivers field
validation
* MeterTuning™ cancels noise &
improves accuracy
* Dial-A-Pipe™ changes pipe sizes in field
* Dial-A-Fluid™ measures variety of fluids
* qMix™ creates custom mixtures
* Many more apps to come...
Next Day Shipping.
An industry first! With its field
adjustability apps, we build to stock
and ship the InnovaMass 241i insertion
model the next day.
SierraInstruments.com/shop
North America / 800.866.0200
Europe / +31 72 5071400
Asia-Pacific / +8621 5879 8521/22
InnovaMass.com
Circle 35 on p. 94 or go to adlinks.chemengonline.com/61495-35
23

http://www.siemens.com http://www.rockwellautomation http://www.SierraInstruments.com/shop http://www.InnovaMass.com http://adlinks.chemengonline.com/61495-35 http://www.Chemengonline.Com

Chemical Engineering May 2016

Table of Contents for the Digital Edition of Chemical Engineering May 2016