Managing Automation :: Technology Solutions for Progressive Manufacturers Sign in or register  |  Advertisers & Press  |  List Product  |   Subscribe to MA Magazine  |  Newsletters  |   My Profile

SCADA Security Pioneer Renames as Industrial Defender

Posted on Tuesday, May 15, 2007 5:08:00 PM       Sign Up to receive Daily News Alerts in your E-mail Inbox                            Digg This Article   Add to Delicious

Abstract:The company formerly known as Verano steps out with a new identity and a managed services product that outsources the management of digital threats to a manufacturer's plant-based control systems.
Keywords:SCADA security, control systems, plant security, IT-based threats, cyber security, Verano, Industrial Defender, critical infrastructure, process manufacturers, DCS security, distributed control system
Relevant Links:

Hoping to capitalize on the brand recognition of its SCADA security product, Verano Inc. today announced that it will henceforth be known as Industrial Defender, Inc.

The company also announced a managed services offering that will serve as the third branch of its product portfolio, which already includes consulting services and software and hardware products.

The centerpiece of the renamed company remains its Industrial Defender product, which is installed on premises to provide IT-based threat prevention and detection — threats that can come from hackers, malware, employees, outside collaborators, and others.

The linchpins of the product are Industrial Defender Guard, which supplies perimeter defense to control and SCADA systems, and the Security Event Monitoring (SEM) console, which displays information and alerts of threats to the IT infrastructure. The ID Guard appliance includes a firewall, virus prevention, and automatic system lockdown based on preset threat levels. Another module, the Network Intrusion Detection System, catches malware at the network level, while the Host Intrusion Detection System monitors and detects untoward events on host computers at the applications and operating system layer.

The Industrial Defender suite is system-agnostic, according to the company, and can operate on top of a distributed control system from any of the major automation vendors.

The new Co-Managed Security Service (CMSS) transfers oversight of the Industrial Defender product to an off-site support center run by Industrial Defender. The managed services available map to the products offered in the Industrial Defender suite, allowing a manufacturer to select the elements of the deployment that it wants monitored and controlled by the technology provider.

Activities covered by CMSS include security and performance monitoring, security device deployments, network user session recording, co-management of firewalls, and co-management of Industrial Defender products, including Unified Threat Management, Network Intrusion Service, and Host-Based Intrusion Detection. The company established a Security Operations Center as a command post for the managed services offering.

Part of the appeal of the service, according to Sath Rao, director of industrial automation and process control at research firm Frost & Sullivan, is the industry knowledge that the vendor brings to plant security. "[The] co-managed security services model provides the ability to leverage industry expertise and provide parallel escalation paths, so that organizations can respond quickly and more efficiently to emerging threats and take preventive actions," Rao told Managing Automation in an e-mail interview.

The functionality Industrial Defender used to establish the managed services offering came from its September 2006 acquisition of e-DMZ Security, LLC, a provider of outsourced security management for control systems.

The cost for the service will be determined by the number of devices managed, and will be charged monthly. Installations of the Industrial Defender product run from approximately $15,000 for a basic deployment of the SEM module and the Guard product to as much as $450,000 for a full deployment in a plant featuring a complex control system.

Adoption of IT-based plant security products has been far from swift. Many industrial companies still look upon cyber-based plant security as a "sunk cost," according to Charles Newton, president of Newton-Evans Research Co., Inc., which specializes in analysis of the utility industry. The fact that a catastrophic IT event hasn't happened is security enough for some, he said, and can lead to questions such as: "Where's the return if I give you a million dollars for a security system? How's that going to benefit us in Wall Street's eyes?"

Page : 12 ... NEXT