PatriotSCADA

Details

Written by SAGE First Inc.

A FIREWALL FOR INDUSTRIAL AUTOMATION EQUIPMENT

PatriotSCADA is a joint venture between SAGE, Inc. and PlantData Technologies, Inc. PatriotSCADA was formed for the purpose of sharing resources, risk, and reward from the development, support, and sales of the PatriotSCADA industrial automation firewall product.

The PatriotSCADA is a new unique security solution specifically designed for SCADA and Industrial Automation networks. A secure SCADA system should prevent attacks from External, Internal Accidental, and Internal Intentional threats. The PatriotSCADA solution is a “bump-in-the-line” security solution that can be easily deployed in ANY SCADA environment using IP protocols without impacting the performance of the system. The PatriotSCADA solution will work regardless of the SCADA software, hardware, SCADA protocol, or network architecture. None of the network IP addresses or system architecture has to change. The PatriotSCADA solution is priced less expensive than any current IT security solution, and provides a low-cost insurance policy for protecting critical infrastructure from cyber attacks. For more information download the PatriotSCADA Overview or PatriotSCADA Technical Sheet.

Features:

• Mac Address Limiting
• Port Management
• Detection and Rejections of DoS Attacks
• Protection from Viruses, Trojans and Common Cyber Attacks
• Secure Your Ethernet Enabled Control System Devices (PLCs, RTUs, IEDs)
• Physically Hardened
• Secure, Cyber-Hardened Operating System
• Protect Your End Devices Against Viruses, Worms, Trojans, Malware and Common Cyber Penetration Attacks
• Transparent In-Line PLC Firewall and Communications Filter

By now, most organizations should have implemented a firewall solution to separate their Corporate or IT Systems from their SCADA, DCS, or Process Control LAN. While this is a very important first step in securing your process control network, this should not be the only layer of protection.

Since the computers that are in the SCADA, DCS, or Process Control LAN are all still susceptible to viruses, worms, Trojans, and malicious code attacks, any Ethernet-based controllers, RTUs, or I/O components in the Process Control LAN should also be protected behind another SCADA firewall. PLCs, RTUs, DCS controllers, and Smart I/O that use Ethernet protocols to communicate back to the SCADA or DCS computers are also vulnerable to DoS attacks and malformed packets. Several of these controllers have been shown to go to their FAULTED state when introduced to ping flood or malformed packet storms.

The PatriotSCADA is designed to sit between the computers in the SCADA, DCS, or Process Control LAN and the control system components that actually control the process. This new industrially hardened product combines firewall, IDS, Port Management, and Packet Inspection technology in one device. It is designed to protect sensitive control systems equipment that communicate over Ethernet protocols from common network attacks. It works by functioning as a transparent communications filter between the SCADA or DCS host systems and the Ethernet PLC or RTU network.

PatriotSCADA uses a customized Linux Operating System that requires Access Control Role-Based security for every request in the kernel. It is designed to withstand wide temperature ranges and harsh environments. It can be Din-Rail mounted directly inside the control cabinet.