Practical Methods of Cyber Security for Commercial Off The Shelf (COTS) Machinery Control Systems.

摘要

Commercial off the shelf (COTS) automation systems have their own methods and techniques for addressing cyber security. Cyber Security measures are limited by the capabilities provided by the manufacturer's hardware and development environments. This paper will address two vendors' specific product's philosophy of cyber security and detailed techniques for securing these automation systems for shipboard applications. This paper will focus on Rockwell Automation ControlLogix and Siemens SIMATIC S7. The majority of the techniques are available scattered throughout the vendors' websites and literature. The goal of this paper is to provide the techniques as a method of comparison of the different approaches between the vendors. The goal is also to discuss the need to upgrade the older Rockwell Automation ControlLogix and Siemens SIMATIC S7 products to newer model processors and firmware. The suggested upgrades specifically address cyber security challenges. This paper will address the different segments of the microprocessors tasking with respect to memory, program execution, hardware inputs/outputs (I/O), communications, Human Machine Interface (HMI) communications, logging detection and prevention of intrusions, authentication, source code protection, and change management.