-
Monday, August 04, 2008
Safety Demo at This Week’s ACS Conference in Chicago
If you are familiar with safety and SIL as defined in ISA-84 and IEC61508, then you are also aware that when a process engineers considers the “safety” of a given component, they are usually considering only the potential for random hardware faults in such a component, and the reliability or likelihood of the safety components to be able to maintain a safe state of the operating equipment. They do not address, explicitly, systematic faults related to software, security issues, etc., as these were generally considered to be too difficult to predict. It is a generally well known and accepted position ...
Read full story
-
Friday, July 11, 2008
Dr. Nate Kube to demo SIS Security Compromise at ACS in Chicago
Joe Weiss has released the tentative agenda for the upcoming 2008 Applied Control Systems - Control Systems Cyber Security Conference set for August 4-7, 2008 in Chicago, IL.
We are excited to announce Dr. Nate Kube, Wurldtech’s Co-Founder and CTO, is slated to present, “Considerations for Security of Integrated Safety Instrumented Systems (SIS): A live Demonstration of a SIS Security Compromise” on August 6th at 2:00pm. More information on this timely and extremely significant presentation will be coming shortly.
With a full line up of speakers and topics, this year’s ACS Conference promises to be one of the most informative ...
Read full story
-
Thursday, January 24, 2008
Safety SIL and Security
As mentioned in a previous post, Dr Nate Kube and myself recently created a paper for the Digital Bond S4 conference in Miami on Security Assurance Levels. Our approach was to look at SIL and compare where the various strengths of SIL versus SAL exist. In short, we found that significant overlap does exist, but there are a number of key areas that require additional attention. Rather than re-write the whole paper here, please email skim@wurldtech.com to get your copy.
Read full story
-
Tuesday, December 18, 2007
Back To Basics: Testing Industrial Control Systems 101
Industry has thrown down the gauntlet to vendors and suppliers of security testing solutions: Testing the network stack or communications protocols is insufficient to ensure safe and reliable operations of industrial components. While plenty of testing tools exist out there today, vendors and asset owners are showing us that you can’t simply tell me that the network stack is up or down. We need to know what jeopardizes uptime and most importantly, safety. A testing methodology that does not reveal the Failure on Demand calculations and provide a reasonable model of failure modes, predictability of failures, and provide accurate feedback ...
Read full story