Emerson's Deltav(TM) Controller and Firewall Achieve Achilles Level 1 Cyber-Security Certification


DeltaV system, a key PlantWeb® component, is recognized for robustness against cyber threats

AUSTIN, TEXAS (May 29, 2007) - Emerson Process Management today announced that its DeltaV(TM) controller and firewall have passed Achilles Level 1 Certification Testing designed to assess the overall security of automation controllers. The DeltaV certification passed over 20 million tests to achieve Level 1 certification. The DeltaV digital system is a key component of Emerson's PlantWeb® digital plant architecture, a global leader in automation of process manufacturing facilities.

"This is another step in our on-going effort to provide a highly secure control network that began when the DeltaV system was first developed," said Duncan Schleiss, vice president of marketing, Process Systems and Solutions, for Emerson Process Management. "Starting from the initial release, the DeltaV system has provided such security features as anti-virus protection and role-based user security, and is architected as a private network to keep the control system separate from any non-control networks. The use of DeltaV firewalls provides a plug-and-play security solution for DeltaV systems to deploy recently tested security solutions."

The Achilles Certification Program was developed by Wurldtech Labs and its partners to provide a benchmark for certification of secure industrial controllers. The program is designed to assess the overall security of industrial controllers and provide the most complete, accurate and trustworthy information possible on their security. Level 1 certification focuses on layers 2 to 4 and the implementation of common protocols such as Ethernet, ARP, IP, ICMP and UPD.

The challenge in testing automation controllers lies in a lack of detailed information available to vendors about the protocol stacks they are using, especially when used in conjunction with their own proprietary protocols. Achilles certification overcomes this problem by combining mathematically rigorous test-packet generation and stateful recognition with highly advanced black box monitoring techniques. Complex sequences of test packages generated automatically enable precise trace identification for any points of concern to discover both known and unknown errors and vulnerabilities.

"Automation engineers can have a higher degree of comfort knowing that DeltaV controllers have passed an accepted set of test suites and test parameters," said Bob Huba, senior product manager for Emerson Process Management. "Controllers with Level 1 certification have demonstrated the robustness to survive network cyber attacks. One real benefit of passing these rigorous tests is to provide users with the ability to better plan the installation of security updates and new anti-virus signatures. Knowing that the controllers can survive a possible security incident provides an opportunity to schedule these patching tasks around process activities rather than always immediately deploying the updates."

The DeltaV system (www.EasyDeltaV.com) combines the rings of protection, in which an intruder must get past successive layers of protection devices, with defense in depth, consisting of protections enabled within the security rings. The DeltaV network sits at the center of protection layers that provide as much system isolation as possible from attacks originating in the plant LAN network space. The basic security strategy for any automation system is to manage user and network access to the system to protect the controller from attack.

About Wurldtech

Wurldtech Security Technologies (www.wurldtech.com), headquartered in Vancouver, BC, Canada, is the leading provider of security solutions to SCADA, process control and mission-critical industries. Founded in 2006 based on research conducted at the British Columbia Institute of Technology (BCIT), Wurldtech is committed to delivering breakthrough products and services that help protect global critical infrastructure and address the security needs of major industrial organizations and government agencies worldwide.

About Emerson Process Management

Emerson Process Management (www.emersonprocess.com), an Emerson business, is a leader in helping businesses automate their production, processing and distribution in the chemical, oil and gas, refining, pulp and paper, power, water and wastewater treatment, food and beverage, life science, and other industries. The company combines superior products and technology with industry-specific engineering, consulting, project management and maintenance services. Its brands include PlantWeb®, DeltaV(TM), Fisher®, Micro Motion®, Rosemount®, Mobrey®, Bristol®, Daniel®, Ovation®, and AMS(TM) Suite.

About Emerson

Emerson (NYSE: EMR), based in St. Louis, is a global leader in bringing technology and engineering together to provide innovative solutions to customers through its network power, process management, industrial automation, climate technologies, and appliance and tools businesses. Sales in fiscal 2006 were $20.1 billion. For more information, visit www.GoToEmerson.com.

Contacts:David Holmes, Emerson Process Management, Process Systems & Solutions
1 (512) 418-7536, David.Holmes@EmersonProcess.com

Peter Dossing, Emerson Process Management
1 (512) 832-3062, Pete.Dossing@EmersonProcess.com

Contact This Company

All Topics