Rapid Configuration Security System for Industrial Control Infrastructure

摘要

A template for implementing a control system with security features provides a generic control program and device programs for distribution to industrial controller and associated control devices together with matching security programs for distribution to the control devices, the security program providing for the generation of security thumbprints indicating the state of the control devices. The template may also be associated with a security-monitoring program that can receive and process the security thumbprints.

主权项

1. An electronic computer having a processor executing a program stored in a non-transient medium and a security template stored in anon-transitory medium, the security template comprising:
a generic control program executable by an industrial controller for implementing a generic control system in coordination with multiple different control devices connectable to actuators and sensors through I/O points; and a security table providing entries associated with each of the control devices, each entry providing for a control device: (a) a device program executable by the control device for implementing a portion of the generic control system, the device program including generic names for the I/O points; and (b) a security program executable by the control device for generating a security thumbprint of the control device when executing the device program, the security thumbprint providing a compression of a state of the control device when implementing the device program, the state reflecting each of:
(i) operating software of the control device describing operation of the control device and executable by the control device;(ii) configuration data defining a configuration of the control device, and(iii) environmental data defining an operating environment of the control device measurable by the control device.