Control system security in-demand

ICSs can be exposed to the same spam, virus and security threats that corporate IT networks are facing. However, the impact of malicious software on an ICS may be more serious and more damaging than that faced by general purpose computer systems and networks. ABB recommends a defense in depth approach with multiple layers of protection to shield systems and data from threats. The first line of defense is to keep the control system software and operating system software updated and protected. Published security updates and anti-virus patches are vigorously tested on all ABB operating systems to ensure critical functions remain available on customer systems. An active Automation Sentinel agreement is the exclusive way for ABB control system users to receive these validated Microsoft security patches and anti-virus definition files and verification reports.

ABB offers two options for customers to receive these files:

• Registered users can log on to myABB/My Control System account and download the files manually.
• The ABB Security Update Service provides these validated updates and patches from a qualified ABB upstream server through a highly secure automated process to each customer site that subscribes. Frequent and automatic synchronisation of servers is via a secure connection instead of internet connection to third party servers.

The operating system updates and anti-virus software patches that are reviewed, tested, validated and/ or verified by ABB for relevance and system compatibility with its control system software are:

• Microsoft security updates and Microsoft service packs
• McAfee updates, scan engines and virus definition files
• Symantec scan engines and virus definition files.

The ABB Security Update Service helps minimise user efforts in evaluation, installing and testing of security patches and updates. The automated process increases productivity by eliminating time-consuming manual updating. Furthermore, virus scanner software and operating system software are always updated according to ABB’s recommendation.