- by Dr. William Goble, CFSE
- Thursday, January 12, 2012
- News
2011…A Year in Review
2011 was a good year in many ways for Functional Safety and Cyber Security. Several instrumentation products achieved IEC 61508 certification. exida Certification alone issued 64 product certifications (http://www.sael-onine.com). With most certification projects, improvements to the design and quality are made. Some manufacturers…
Read More...
- by Dr. William Goble, CFSE
- Friday, May 04, 2012
- Functional Safety
I Don’t Want No D*** Diagnostics!
After a false trip incident, I heard a control engineer express his displeasure with the automatic diagnostics in a new safety rated transmitter. The transmitter diagnostics were annunciated by sending the analog current out of range. In this case, the current went to 3.6 milliamps. The problem was that…
Read More...
- by Michael Medoff , CFSE, CISA
- Wednesday, August 10, 2011
- Industrial Cybersecurity
Keeping “Dancing Monkeys” out of your PLC
Last week a security researcher, Dillon Beresford of NSS Labs, presented at the Blackhat conference on the security vulnerabilities he found in Siemens PLC firmware. One of many stories on Dillon’s findings can be found here. Among other things, Dillon found “dancing monkeys” in the code! Actually,…
Read More...
- by Michael Medoff , CFSE, CISA
- Thursday, February 09, 2012
- Industrial Cybersecurity
Outrage! Panic! Indifference?
How should you react to news of PLC security vulnerabilities?
Project Basecamp was an exercise conducted at the S4 Security Conference that was held last month in Miami, Florida. At the event, six security researchers reported their findings on the…
Read More...
- by Michael Medoff , CFSE, CISA
- Tuesday, March 15, 2011
- Industrial Cybersecurity
The Real Impact of Stuxnet
Stuxnet has, rightly, generated a significant amount of discussion and concern with the industrial automation community. Fortunately, unless you operate a uranium enrichment facility using Siemens S7 PLC’s and some very specific variable frequency drives (VFDs) you probably haven’t been directly impacted by the Stuxnet…
Read More...
- by Chris O'Brien, CFSE
- Friday, April 13, 2012
- Certification
Too Good to be True
A.K.A You’re About to Severely Under-Design your SIF and Put your People at Risk. Twice this week alone, and much more often than I like to remember, I’ve had safety system designers blindly follow certificates that contain data that simply cannot be true. They get a certificate from…
Read More...