scada & (cyber) security, riconoscimento biometrico ... · ¾soluzione software per plc, scada,...
TRANSCRIPT
![Page 1: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/1.jpg)
SCADA & (Cyber) Security, Riconoscimento Biometrico, Configuration Management
Sergio PetronziInprotec S.p.A.
Distributore ServiTecnoArea centro sud
![Page 2: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/2.jpg)
AgendaSCADA/HMI le funzioniLe Gamp e la SecuritySCADA & Cyber Security:
Funzioni SCADA per la sicurezza.Operatori, Gruppi di Operatori, Aree di Sicurezza.Protezione Ambiente, Log-out, Screensaver.La firma elettronica (E/S).Audit Trail.
Biometria e riconoscimento biometrico:Una soluzione per E/S con SCADA (iFix).
Change Control, Configuration Management, Backup, Incident Recovery Plan:
Soluzione Software per PLC, SCADA, DCS, ecc.
![Page 3: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/3.jpg)
SCADA/HMI: Visualization & Control,Alarming,Trending
ProductionProduction
![Page 4: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/4.jpg)
SCADA & Electronic Batch Record
PackagingPackaging HVACHVAC UtilityUtilitySecondarySecondaryPrimaryPrimary
MES/ BusinessSystem
iHistorian
![Page 5: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/5.jpg)
Le GAMP e la Sicurezza
Appendix O3Guideline for Automated System Security
![Page 6: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/6.jpg)
1- Introduzione2- Ambito3- Responsabilità:
User Company ManagementSystem OwnerPlatform OwnerThe End User
Le GAMP e la Sicurezza
![Page 7: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/7.jpg)
4 - PrincipiClassificazione dei sistemiConsapevolezza degli utentiGestione degli incidentiPolitiche per la sicurezza delle informazioni.
Le GAMP e la Sicurezza
![Page 8: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/8.jpg)
5 - Requisiti dei sistemi e responsabilitàRequisiti operativi Requisiti per le comunicazioniRequisiti per la sicurezza fisica ed ambientaleRequisiti per il controllo accessiRequisiti per il monitoraggio del sistemaRequisiti per la continuità di funzionamentoRequisiti per l’efficacia della sicurezza
Le GAMP e la Sicurezza
![Page 9: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/9.jpg)
Altri rimandi alla sicurezza dei sistemi nelle GAMP4 - O7: Backup and Recovery- M9: Configuration Management- O4: Change Control- O5: Performance Monitoring- O6: Record Retention and Retrieval- O8: Business Continuity Plan- O1: Periodic Review
Le GAMP e la Sicurezza
![Page 10: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/10.jpg)
Security Configuration
![Page 11: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/11.jpg)
Password ManagementSecurity Policies
![Page 12: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/12.jpg)
User Administration
+ Sincronizzatore della Security di Windows
![Page 13: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/13.jpg)
Securing System Level Access
![Page 14: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/14.jpg)
Screen Saver for Continuous Use
![Page 15: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/15.jpg)
21CFR11: Point of Entry Verification
![Page 16: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/16.jpg)
Security Group & Security Area
Gruppi Sicurezza Area Sicurezza
OPERATORS
SUPERVISOR
ADMINISTRATORS
MAINTENANCE
CONTROL
MAINTENANCE
PROCESS SETPOINT
ALARM SETPOINT
![Page 17: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/17.jpg)
Configurazione Gruppi Sicurezza
![Page 18: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/18.jpg)
Configurazione Aree Sicurezza
![Page 19: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/19.jpg)
Configurazione User
![Page 20: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/20.jpg)
E/S: dove e come
![Page 21: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/21.jpg)
Firma Singola o “Congiunta”?
![Page 22: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/22.jpg)
Tastiera “virtuale”, soft-keyboard
![Page 23: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/23.jpg)
Audit Trail e Report
![Page 24: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/24.jpg)
Agenda
SCADA & Cyber Security:Funzioni SCADA per la sicurezza.Operatori, Gruppi di Operatori, Aree di Sicurezza.Protezione Ambiente, Log-out, Screensaver.La firma elettronica (E/S).Audit Trail.
Biometria e riconoscimento biometrico:Una soluzione per E/S con SCADA (iFix).
Change Control, Configuration Management, Backup, Incident Recovery Plan:
Soluzione Software per PLC, SCADA, DCS, ecc.
![Page 25: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/25.jpg)
Biometria & 21CFR Part11
FDA 21CFR Part.11 (c/11.200b): “Electronic signatures based upon biometrics shall be designed to ensure that they cannot be used by anyone otherthan their genuine owners”.
![Page 26: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/26.jpg)
Impronta digitale: come funziona?
Il riconoscimento biometrico / Autenticazione: l’utente si qualifica ed il sistema biometrico autentica (o no) il soggetto.
![Page 27: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/27.jpg)
Biopass+: l’operatore si identifica con un dito
•Impronta + Smartcard: autenticazione ibrida•L’utente dispone del suo dato biometrico•L’impronta non lascia il dispositivo•L’impronta non transita su computer e/o in rete
![Page 28: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/28.jpg)
Verifica e autenticazione
![Page 29: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/29.jpg)
Point of Entry Verification
Passare il dito sul lettore per confermare
![Page 30: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/30.jpg)
Agenda
SCADA & Cyber Security:Funzioni SCADA per la sicurezza.Operatori, Gruppi di Operatori, Aree di Sicurezza.Protezione Ambiente, Log-out, Screensaver.La firma elettronica (E/S).Audit Trail.
Biometria e riconoscimento biometrico:Una soluzione per E/S con SCADA (iFix).
Change Control, Configuration Management, Backup, Incident Recovery Plan:
Soluzione Software per PLC, SCADA, DCS, ecc.
![Page 31: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/31.jpg)
Tool per Change Control & Configuration Management
Per gestire in la documentazione: File di Configurazione e sw dei PLCDocumentazione Tecnica di ProgettoPart Program CNC/DNC, MHS, sw SCADA/HMIDocumentazione di convalidaBack-up/Recovery Plan
Come si può tenere automaticamente sotto controllo tutto questo ?
![Page 32: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/32.jpg)
Configuration Manager
![Page 33: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/33.jpg)
Automation Software Control
MDT MDT AutosaveAutosaveDevelopment Requires Code Management Tools
SecuritySecurityChangeChange
DiscoveryDiscoveryArchivalArchivalBackupBackup
ChangeChangeTrackerTracker
VersionVersionControlControl
EditEditControlControl
![Page 34: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/34.jpg)
Scheduler per attività in automatico
Manager AMSManager AMS
(1) Time-scheduled event
(2) Upload device
(3) Compare to Current Version
(4) Email differences report
(5) Create new Current Version
![Page 35: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/35.jpg)
•I Files sono salvati in locale, vengono“zippati” e vengono inviati al server per la gestione automatica dei back-up. •Il server crea la nuova copia corrente, memorizza la copia precedente, aggiorna I file ed invia una email di notifica al “proprietario”
Server
Come funziona?
![Page 36: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/36.jpg)
Interfaccia per tutti gli Editor
![Page 37: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/37.jpg)
Altri rimandi a norme e standard per la sicurezza dei sistemi, delle reti e delle informazioni nelle applicazioni industriali e di produzione:
BS7799-2:2002 Information security management systems – Specification with guidance for useISO/IEC 17799:2000 Information Technology – Code of practice for information security management ISA SP99 TR1 Security for Manufacturing and Control Systems (ISA-TR99.00.21-2004) ISA SP99 TR2 Integrating Electronic Security into Manufacturing and Control Systems Environment (ISA TR99.00.02-2004)ISO/IEC 15408 Common CriteriaNIST System Protection Profile for Industrial Control Systems (SPP-ICS)CIDX Chemical Industry Data Exchange - Cibersecurity Vulnerability Assessment Methodology (VAM) Guidance
Security, oltre le Gamp4
![Page 38: SCADA & (Cyber) Security, Riconoscimento Biometrico ... · ¾Soluzione Software per PLC, SCADA, DCS, ecc. SCADA/HMI: Visualization & Control,Alarming,Trending ... Email differences](https://reader034.vdocuments.mx/reader034/viewer/2022042509/5b85e2477f8b9a2e3a8bb7f3/html5/thumbnails/38.jpg)
SCADA & (Cyber) Security, Riconoscimento Biometrico, Configuration Management
Grazie per l’attenzione!
Sergio [email protected]
www.inprotec.it
www.servitecno.itwww.visionautomation.it