03-04-2017
Honeywell launches new industrial cyber security solution to enable secure use of USB devices
Honeywell Process Solutions (HPS) today announced a new solution for industrial sites as they balance productivity and cyber security demands. Honeywell’s new Secure Media Exchange (SMX) protects facilities against current and emerging USB-borne threats, without the need for complex procedures or restrictions that impact operations or industrial personnel.
Malware spread through USB devices – used by employees and contractors to patch, update and exchange data with onsite control and computer systems – is a key risk for industrial control systems. It was the second leading threat to these systems in 2016, according to BSI publications, and uncontrolled USBs have taken power plants offline, downed turbine control workstations, and caused raw sewage floods, among other industrial accidents.
“Industrial operators often have hundreds or thousands of employees and dozens of contractors on site every day,” said Eric Knapp, Cyber Security chief engineer, HPS. “Many, if not most, of those rely on USB-removable media to get their jobs done. Plants need solutions that let people work efficiently, but also don’t compromise cyber security and, with it, industrial safety.”
Currently, many plants either ban USBs, which is difficult to enforce and significantly reduces productivity, or rely on traditional IT malware scanning solutions, which are difficult to maintain in an industrial control facility and provide limited protection. These solutions fail to protect process control networks against the latest threats, and offer no means to address targeted or zero-day attacks.
“SMX is a great example of Honeywell’s major investments in new industrial cyber security technologies, products, services, and research which further strengthen our ability to secure and protect industrial assets, operations and people,” said Jeff Zindel, vice president and general manager, Honeywell Industrial Cyber Security. “With the continued increase in cyber threats around the world, Honeywell’s industrial cyber security expertise and innovation are needed more than ever for smart industry, IIoT and critical infrastructure protection.”
Honeywell’s SMX was developed by the company’s cyber security experts based on field experience across global industrial sites and feedback from Honeywell User Group customers. Honeywell has one of the largest industrial cyber security research capabilities in the process industry, including an advanced cyber security lab near Atlanta. Honeywell also partners with cyber security leaders, including Microsoft, Intel Security and Palo Alto Networks, among others, to develop new, highly-effective industrial threat detection techniques.
Honeywell’s SMX provides hassle-free, multi-layered protection for managing USB security, letting users simply plug in and check devices for approved use in the facility. Contractors “check-in” their USB drive by plugging it into an SMX Intelligence Gateway. The ruggedized industrial device analyzes files using a variety of techniques included with Honeywell’s Advanced Threat Intelligence Exchange (ATIX), a secure, hybrid-cloud threat analysis service.
SMX Client Software installed on plant Windows devices provides another layer of protection, controlling which USB devices are allowed to connect, preventing unverified USB removable media drives from being mounted, and stopping unverified files from being accessed. SMX also logs USB device connectivity and file access, providing a valuable audit capability.
“For most plants, the proliferation of removable media and USB devices is unavoidable, but the security risks they bring don’t have to be,” said Knapp. “We know our customers have limited resources to maintain another system, so Honeywell manages SMX for them. SMX never connects to our customers’ process control networks. From a system administration perspective, it’s like it’s not even there.”
Managed and maintained directly by Honeywell, SMX provides the easy and secure solution to USB security in industrial plants. It helps prevent the spread of malware through removable media; stops unverified files being read by Windows hosts; and, through the private ATIX connection, provides continually updated threat information and advanced analytics to help detect advanced, targeted, and zero-day malware.
Honeywell is the leading provider of industrial cyber security solutions that protect the availability, safety and reliability of industrial facilities and help securely deploy Industrial Internet of Things (IIoT) technologies. Honeywell’s complete portfolio includes cyber security technology solutions, managed industrial cyber security services, and professional cyber security field services. The portfolio leverages the company’s industry-leading expertise and experience in process control.
News Category:
-
Beyond processbook & PI vision: Exploring today’s industrial analytics tools
(Webinar) - In the Manufacturing 4.0 era, industrial organizations have more data at their fingertips than ever, offering the promise of higher production rates, more ...
04-06-2024
-
MOL inaugurates its polyol complex in Tiszaújváros
MOL's EUR 1.3 billion polyol complex in Tiszaújváros, boasting a capacity of around 200,000 tonnes of polyol per year, has been inaugurated. The ceremony, addressed ...
15-05-2024
-
NEXTCHEM completes the acquisition of GasConTec
Further to the announcement made on 4 March 2024, MAIRE announces that NEXTCHEM has finalized the acquisition of 100% of GasConTec GmbH, an innovative company specialized ...
15-05-2024
-
KBR awarded digital solutions contract by OCI
KBR announced today it has been awarded a contract by OCI Global to design and deploy its proprietary operator training simulator for OCI's 3,000 metric tonnes ...
13-05-2024
-
Worley awarded Bayou Bend CCS carbon capture and storage facility contract
We’ve been selected to design and evaluate CO2 gathering, handling and sequestration facilities located along the Gulf Coast in Southeast Texas. Bayou Bend ...
13-05-2024
-
Black & Veatch delivers feasibility study for Andes Energy LNG Terminal
Global liquefied natural gas (LNG) infrastructure solutions leader Black & Veatch has completed a feasibility study for the planned Andes Energy Terminal, LNG regasification ...
09-05-2024
-
Shell to sell interest in Singapore Energy and Chemicals Park to CAPGC
Shell Singapore Pte Ltd, a subsidiary of Shell plc, has reached an agreement to sell its Energy and Chemicals Park in Singapore to CAPGC Pte. Ltd., a joint venture company ...
08-05-2024
-
Integrated Global Services recognized for role in mega turnaround
Integrated Global Services has been recognized as a major contributor to the successful Ras Tanura Refinery 2024 Mega Turnaround and Inspection for Saudi Arabian Energy ...
08-05-2024
-
Ebara Elliott Energy to provide compressor for SAF project in Thailand
Ebara Elliott Energy, formerly Elliott Group, announces it has been contracted to provide a motor-driven recycle compressor with a variable frequency drive (VFD) for ...
07-05-2024
-
ETH Zurich select hte to provide high throughput test system designed for CO2 electroreduction
hte – the high throughput experimentation company was awarded a contract by the technical university ETH Zurich to provide a high throughput test system designed for ...
07-05-2024