real world, multi-vendor, single security solution on display in Hannover Messe

Schneider Electric will take part in system demonstrating advanced cybersecurity concepts sponsored by the Industrial Internet Consortium (IIC) at Hannover Messe that will take place from the 24th-28th of April in 2017.

The Industrial Internet of Things (IIoT) is driving the addition of more connected devices.  Cybersecurity is critical to success of IIOT.  The demonstration illustrates how the IIC’s recently released Industrial Internet Security Framework can be applied to solve this challenging problem. Mimicking a real-world, multi-vendor, distributed environment, the demonstration integrates existing Hannover Messe demos from 24 IIC and Plattform Industrie 4.0 member companies into a single security solution. It spans multiple booths at Hannover Messe and remote sites around the world.

The consortium has created a joint security industrial internet demonstration based on cloud based data access using products from variety of vendors.  The system demonstrates how data from both new and legacy PLCs can be secured in an Industrial Control System.  The system includes both the M580 and M340 PLCs.  The M580 is Schneider’s flagship PLC that was developed with cybersecurity features integrated into the platform.  The M340 is an older PLC platform that is protected in the demonstration by an Intel Security IoT Gateway.  The Intel Security IoT Gateway provides cybersecurity features that help to secure legacy PLCs that lack native cybersecurity features.

The demonstration exhibits the secure transfer of syslog events from both M580 and M340 PLCs.  Syslog events are forwarded to a McAfee Security Information and Event Management (SIEM) device through a Waterfall Data Diode.  The Data Diode is a device that enhances security by allows data to travel in only one direction via optical isolation, significantly improving information security.  The M580 will send events to the Data Diode using the secure Syslog protocol via the Intel Security IoT Gateway.  The M580 also supports a secure web server and Secure Modbus Server.  The M340 will forward log information to the Data Diode through the Intel Security Gateway.  The secure Modbus protocol is not natively supported on the M340 PLC – the Intel Security Gateway proxies secure Modbus for the M340 and forwards it to the M580 PLC.

The demonstration exhibits techniques which help to secure industrial control systems using devices available in the market.  For more details, please visit the Schneider Electric booth at the Hannover Messe.