Waterfall Unidirectional Security Gateways Earn Common Criteria EAL4+ Certification


TEL AVIV, Israel - Waterfall Security Solutions announced today that their Unidirectional Security Gateway WF-400 1Gbps product has been awarded an EAL 4+ (resistant to high attack potential) certification under a Common Criteria security evaluation. Common Criteria is the premier, internationally-recognized process for evaluating the trustworthiness of security products used in military, government, and civilian settings, and EAL 4+ is the highest internationally-recognized assurance level under the Common Criteria Recognition Agreement (CCRA). Waterfall is the leading provider of hardware-enforced unidirectional security for industrial control systems in critical national infrastructures.

Lior Frenkel, Waterfall's CEO and Co-Founder, comments, "The EAL 4+ certification is additional recognition of Waterfall's commitment to leadership in the industrial security marketplace. Waterfall's unidirectional security technology was the first to be assessed by the SCADA Security experts at Idaho National Labs, was recently recognized by Frost & Sullivan with a Best Practice award for Industrial Network Security, and is the subject of other international and regional security and quality certifications."

EAL 4+ certification assures customers that a security product is robust and was methodically defined, tested and verified. Being resistant to high-attack-potential is an additional, elective level of certification, and means that even adversaries with significant time, knowledge, expertise and hardware/software resources at their disposal will find it extremely difficult to compromise the technology. The certified Waterfall technology permits business-critical information to flow from industrial control systems into business systems, without permitting any information to flow back into the protected industrial network. The technology blocks the flow of all information back into the protected network, specifically including network-propagating malware and "under the radar" remote-control attacks by so-called "advanced persistent threats."

"Strong network perimeter protection is essential to the safety and security of our critical industrial infrastructures," adds Andrew Ginter, Waterfall's Director of Industrial Security. "The 'air gaps' which historically protected control networks have largely been replaced by much-weaker firewall technology. Unidirectional Security Gateways allow business-critical information to flow out of a control network, without introducing the vulnerabilities which firewalls introduce. With this certification, Waterfall customers can be even more confident in our technology as part of their industrial cyber security program."

About Waterfall Security Solutions

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways and data diodes for industrial control networks and critical infrastructures. Waterfall's Unidirectional Gateways reduce the cost and complexity of compliance with NERC-CIP, NRC, NIST, CFATS and other regulations, as well as with cyber-security best practices. Waterfall's products are deployed in utilities and critical national infrastructures throughout North America, Europe, Asia and Israel. Frost & Sullivan describe Waterfall's solutions as ensuring "optimum security for networks across user verticals" and awarded Waterfall the 2012 Network Security Award for Industrial Control Systems Entrepreneurial Company of the Year. Waterfall's offerings include support for leading industrial applications, including the OSIsoft PI(TM) Historian, the GE Proficy(TM) iHistorian, Siemens SIMATIC(TM)/Spectrum(TM) solutions and GE OSM(TM) remote monitoring platforms, as well as OPC, Modbus, DNP3, ICCP and other industrial protocols.

More information about Waterfall can be found on the company's website at: www.waterfall-security.com.

Source: Waterfall Solutions Ltd

Waterfall Security contact information: Web: www.waterfall-security.com, Tel: +1-646-727-7276, Email: Info@waterfall-security.com.

All Topics