MatrikonOPC with Fox DataDiode: Providing the highest levels of security and interoperability for SCADA
A partnership between MatrikonOPC and Fox-IT enables Fox DataDiode to be embedded seamlessly into SCADA networks for the highest levels of systems security and interoperability. MatrikonOPC is a leading provider of data connectivity software based on the OPC standard. The companys products enable reliable data access to all major vendors systems for industrial automation, such as: PLCs, sensor and monitoring systems, historical databases, HMIs and other devices for implementing complete OPC architectures. The use of Fox DataDiode with MatrikonOPC gives customers higher security and operational efficiency of critical Process Control Systems (PCS) such as those used to manage power plants, water treatment facilities, gas and oil refineries, public transport and financial services.

Business drivers

Operators of SCADA networks have conflicting requirements: 1. Safety and securityData and programming that controls such critical infrastructure must be protected against increasingly sophisticated cyber threats. 2. Information sharing between high-security PCS infrastructure and less secure back-office systems and networksto improve decision making for optimal business performance.
The combined solution protects PCS from cyber threats, including Stuxnetclass malware, yet allows information to be shared in real-time with backoffice systems and other networks to improve business decisions, operational efficiencies and customer service. Fox DataDiode eliminates the need for air-gap data transfers with USB devices or other portable media, and thereby the threat of introducing malware, accidentally or intentionally, in addition to online threats. Fox DataDiode physically connects devices for secure one-way transmission. It does not contain decision logic, software or firmware that could compromise OPC architecture. It eliminates opportunities for software malfunctions, malware, tampering or online attacks. It cannot be misconfigured, eliminating the potential for human error.
PCS security vulnerabilities
Even when fully compliant with the latest OPC standards, security measures for PCS networks are limited to DCOM-based access permissions, firewalls and air gap data transfers. These are still vulnerable to human error (wrongly configured firewalls or access permissions) and malicious intent (e.g., the Stuxnet worm that targets SCADA systems has been spread, either intentionally or accidentally, by infected air-gap devices, such as USB flash drives.)
Highest-level security certification for SCADA networks
The addition of Fox DataDiode to the MatrikonOPC security layer provides the highest protection possible for national critical infrastructures and other SCADA networks. Fox DataDiode is Common Criteria EAL7+ certifiedthe highest certified security assurance level. It is approved for connection of networks up to and including NATO Secret and is increasingly selected to upgrade the security of government networks. Security standards similar to those mandated by governments are needed for SCADA networks as well. Fox DataDiode supports all standard SCADA protocols including OPC, ICCP, DNP3 and Modbus. Both Matrikon and FoxIT are listed Compliance Vendors by the NERC.
Why PCS requires bulletproof security

A security breach of any critical infrastructure, whether accidental or intentional, can be catastrophic. Espionage, terrorism, extortion, vandalism and theft of proprietary information are major threats. In February 2011, McAfee issued a white paper on Night Dragon, a series of covert cyberattacks against global oil, energy, and petrochemical companies since November 2009. The attackers targeted proprietary operations and project-financing information on oil and gas field bids and operations, according to the company. Stuxnet, which is described in a January 2011 New York Times article as the most sophisticated cyberweapon ever deployed, is reported to have delayed Irans nuclear program by several years. Its concept and effectiveness can only elevate the level of cyber warfare among governments, terrorists, and virtually any group committed to vandalizing infrastructure.
Most secure access to SCADA network data for business decisions
As with any business, organizations engaged in providing critical public services strive to obtain optimal levels of performanceoperationally, financially, and in terms of customer satisfaction and shareholder value. Just as manufacturers seek to integrate systems across their extended enterprise for real-time business visibility and decision making, critical infrastructure companies need similar access to data from their SCADA networks. The combination of MatrikonOPC with Fox DataDiode enables data to be securely sent from the SCADA network in real time for business decisions without exposing the network to cyber threats. Based on global annual surveys of process automation professionals, MatrikonOPC has been recognized with Control Global Magazines Control Readers Choice Awards for OPC Connectivity Software for the last two
Combined value of MatrikonOPC with Fox DataDiode
The partnership between MatrikonOPC and Fox-IT enables Fox DataDiode to be embedded seamlessly into SCADA networks for the highest level of cyber security. MatrikonOPC software enables connectivity to virtually any PCS device. Fox DataDiode secures PCS data transfers with one-way transmission, which effectively disconnects the critical part of PCS infrastructure from other networks while still allowing access to information from that critical part.
Office network Sensor network Supervisory network Administration network

Internet

years. The company has also received dozens of other prestigious awards as a leading vendor for automation control.

Highest levels of security and interoperability for SCADA networks
Native support for the OPC Foundations OPC Security specification is crucial for implementing secure SCADA architectures. With Fox DataDiode, MatrikonOPC products offer complete control over information browsing, reading, and writingon a per-user, per-access basis. Instead of relying only on global, DCOM-based, all-or-nothing OPC data access permissions, MatrikonOPC with Fox DataDiode provides granular, role-based control over security to help prevent unauthorized OPC data access, whether accidental or intentional. Using Fox DataDiode, MatrikonOPC enables customers to add another layer of security to their overall Defense-in-Depth strategy. MatrikonOPC value-added products with Fox DataDiode include: OPC Desktop Historian OPC HistoryLink OPC Buffer
Maximum Interoperability with other vendors products in strict adherence to the OPC Foundations OPC DA, OPC, HDA and OPC A&E specifications
Offline Mode, which aids system integration and simplifies OPC server configuration by allowing OPC clients to access data from all configured OPC items, even when the underlying data source is not available
User-Defined Tag Names, which enables creation of virtual OPC items on any Matrikon OPC server for testing or user-defined status indicators
The above can be used with any of MatrikonOPCs full line of advanced functionality servers, including: Wireless-Ready OPC Suite OPC Server for DNPS OPC Server for ICCP OPC Server for IEC 60870-5 OPC Server for IEC 61850 OPC Server for OMNI Flow Computers OPC Server for Roc/Roc Plus PLC OPC Server Suite OPC Server for Allen Bradley PLCs OPC Server for GE Fanuc PLCs OPC Server for Mitsubishi PLCs OPC Server for Modicon (Modbus) PLCs OPC Server for OMRON PLCs OPC Server for RSLinx OPC Server for Siemens S7 PLCs OPC Server for Siemens SIMATIC TI505 All MatrikonOPC servers feature: Device Communication Redundancy, enabling access to multiple data sources in a redundant fashion without the need for specialized hardware or additional custom software Data Calculations, to help reduce OPC client-side computing requirements and network traffic volume Alarms and Events, to trigger alarms and events based on the OPC items value (includes OPC-compliant client filtering by event type, severity and category

About Fox DataDiode

The Fox DataDiode enables reliable real-time transmission of information from one network to another, in a unidirectional mode only. No data of any type or sort can pass in the opposite direction. Assurance for the Fox DataDiode has been provided by NATO (Secret), German and Dutch governments (Secret) and Common Criteria EAL 7+. Key Features of the Fox DataDiode include: Reliable real-time data transfer over a one-way connection Multiple systems can share the same Fox DataDiode Easy-to-use web interface for users and administrators High-throughput using 1 Gb/s fiber optics Confidentiality for classified and critical PCS networks

About Matrikon OPC

MatrikonOPC provides equipment data connectivity software based on the OPC standard. The MatrikonOPC promise is to empower customers with reliable data access to all major automation vendors systems, provide practical OPC training and deliver superior client care. MatrikonOPC builds close relationships with its customers to best address their business and technical needs. With offices in North America, Europe, Asia-Pacific and the Middle East, MatrikonOPC provides local presence on a global scale. MatrikonOPC is a vendor neutral connectivity supplier.

About Fox-IT

Fox-IT specializes in cyber defense, IT Security, lawful interception and digital forensics solutions, providing completely secure, easy-to-use and automated products for data transport, interpretation and archiving to government defense and intelligence agencies, systems integrators and commercial organizations worldwide. Fox-IT solutions maintain the security of government systems up to state secret level sensitivity, critical infrastructure and process control networks and other highly confidential data. The company also provides services including IT security audits, digital forensic investigations, training programs and managed security services. Established in 1999, Fox-IT is based in the Netherlands and works with trusted partners in more than 20 countries.

Fox-IT

Olof Palmestraat LM Delft The Netherlands P.O Box AP Delft
t +31 (0)f +31 (0)edatadiode@fox-it.com

www.fox-it.com Matrikon

Suite Jasper Avenue Edmonton, Alberta, Canada T5J 3N4 Toll Free: 1-877-MATRIKON (1-877-628-7456) Phone: +1 (780) 945-4099 Email: info@MatrikonOPC.com

www.MatrikonOPC.com