ABB announced its System 800xA Extended Automation AC 800M controller recently achieved Achilles Controller Level 1 cyber security certification. Wurldtech Security Technologies, a leading provider of security products and services for the industrial automation industry, introduced its Achilles Controller Certification Program earlier this year.
The Achilles testing process is very rigorous, according to Wurldtech, the majority of controllers submitted have failed Level 1 Certification testing, and a substantial number have still not passed on retest. The AC800M controller passed each of the over 30 million individual tests required to achieve Achilles Level 1 Certification.
"Cyber security is one of the most challenging issues that today's automation customers must consider when evaluating their control system strategies; the Achilles certification program assures these customers that their automation system has the quality, reliability and robustness needed to resist a potential cyber incident," said Alicia Bauer, Director of Systems Marketing, ABB Inc. "We have pursued Achilles certification for the AC 800M controller as part of our ongoing commitment to provide our customers with trusted, high integrity solutions that help them operate more safely, securely, and productively."
Over the past decade, critical equipment used in the control of power generation and distribution, oil production, transportation, manufacturing and other critical processes has become increasingly interconnected through the use of technologies such as Ethernet, TCP/IP and various web services. While this has brought considerable benefit in the form of improved information flows and efficiency, it also exposes these systems to the possibility of attack from viruses, hackers and terrorists from around the world. Because of this, the industrial controls industry is experiencing pressure from government and industry to meet ever growing regulatory and security compliance requirements.
Wurldtech and its partners developed the Achilles Certification Program to provide a benchmark for the certification of secure industrial controllers. The certification process presents device manufacturers with an independently verified result from which to communicate their product security to customers, while providing operators of control systems the most complete, accurate, and trustworthy information currently possible on the security of their deployed products. Achilles Level 1 Certification verifies the security, reliability, and robustness of a device's implementation of OSI layers 2 4, including Ethernet, ARP, IP, ICMP, TCP and UDP.
