Open Secure Automation (OSA®)

As part of their participation at the ARC Conference, Bedrock Automation has announced the availability of Cybershield 3.0, a major firmware upgrade with advancements that make it easier for end users and developers to build control applications that are both open and secure.

Included capabilities 1. Secure Open SCADA with OPC UA. The cryptographic keys built into all the Bedrock system electronics, provide the root of trust for the Bedrock Certificate Authority that verifies the reliabili-ty of OPC UA-managed commun-ications between SCADA & PLCs or other industrial control systems. 2. Open Certificate Authority (CA) for SCADA. This advanced SaaS key & certificate management tool is not only FREE to our customers but is simple to deploy with our Secure SCADA Interface Specification. Leading SCADA providers, including Inductive Automation, ICONICS & Tatsoft, are committing to and releasing support to this interface specification. 3. Intrusion detection. Even though the Bedrock control system has protection built into its core, users still need to know when system security is challenged. Cybershield 3.0 comes standard with intrinsic Anomaly Detection (AD) functionality that continuous-ly monitors the controller’s net-work & system time to detect intrusions & anomalous behavior and report it to both SCADA and enterprise database applications for trending, alarming and historizing anomalous cyber activity. 4. Quickly Secure Legacy Automation with Secure SCADA. Companies can now use Bedrock security to help integrate open standard communications protocols with legacy PLC & DCS systems from other vendors. A Bedrock secure controller module acts as a gateway between SCADA platform workstation and the legacy controllers. 5. Cryptographic key locking. Cybershield 3.0 includes a cryptographic controller engineer-ing key lock that permits only users with the required credentials to change the mode of the controller. 6. Achilles and EMP compliance on power supplies. Bedrock Automation is certifying its stand-alone power supply & standalone uninterruptible lithium power supply to both MiL-STD-461-G, the military standard for advanced EMP hardening, and Achilles Level 2 certification, augmenting the EMP and Achilles certification achieved for its control system modules last year.

Among the six major innovations facilitated by the Cybershield 3.0 upgrade are the first public key infrastructure (PKI) built into an OPC UA server for SCADA applications; an industrial Certificate Authority (CA) for user key management; virtual crypto key locks for the controller; and a Secure Proxy server capability that can protect legacy controls systems of other vendors.

“Cybershield 3.0 is one of the most significant steps forward since the release of our Bedrock OSA platform. We now support leading SCADA companies in integrating their OPC UA client to our open security and key management tools. In addition, we start our march to converge IT cyber detection technologies into real-time OT automation with our integrated Anomaly Detection (AD) tools built into every controller. We are delivering secure SCADA and AD as intrinsic and zero-cost advancements, focused acutely on ease of use and reductions in lifecycle costs,” said Bedrock founder and CEO Albert Rooyakkers.

“Today’s increasingly connected environment drives the process industries to search for automation solutions that deliver the benefits of open communications with ‘baked in’ cybersecurity. By extending its secure automation technology to third-party software providers, Bedrock Automation addresses this key pain point of future automation requirements. ARC believes the intrinsic and no-cost approach of Bedrock’s cybersecurity strategy is the quintessential component missing in control systems, today,” writes ARC analyst Mark Sen Gupta in his recent report, Bedrock Automation’s Open Secure Automation a “Win” with End Users

Cybershield 3.0 will be standard on all Bedrock control systems starting in Q2 of 2018 and will also be made available to current Bedrock users as a free upgrade.

 

 

 

 

 

 

 

 

 

@BedrockAuto #PAuto @arc_advisory