SCADA systems

Since the SCADA systems sensors provided valuable information, many utilities and other industries established connections between their SCADA systems and their business system. This allowed utility/industrial management and other staff access to valuable statistics, such as chemical usage. When utilities/industries later connected their systems to the Internet, they were able to provide stakeholders/stockholders with usage statistics on the utility/industrial web pages. Figure 7.1 provides a basic illustration of a representative SCADA network. Note that firewall protection (see chapter 9) would normally be placed between the Internet and the business system and between the business system and the MTU. 

As stated above, SCADA systems can be designed to measure a variety of equipment operating conditions and parameters, or volumes and flow rates, or chemical and chemical mixture quality parameters, and to respond to changes in those parameters... 

Because these systems can monitor multiple processes, equipment, and infrastructure and then provide quick notification of, or response to, problems or upsets, SCADA systems typically provide the first line of detection for atypical or abnormal conditions. For example, a SCADA system that is connected to sensors that measure specific water quality parameters shows measurements outside of a specific range. A real-time customized operator interface screen could display and control critical systems monitoring parameters. 

To ensure the highest degree of security of SCADA systems, isolate the SCADA network from other network connections to as great a degree as possible. Any connection to another network introduces security risks, particularly if the connection... 

Some SCADA systems use unique, proprietary protocols for communications between field devices and servers. Often the security of SCADA systems is based solely on the secrecy of these protocols. Unfortunately, obscure protocols provide very little real security. Do not rely on proprietary protocols or factor default configuration settings to protect your system. Additionally, demand that vendors disclose any backdoor or vendor interfaces to your SCADA systems, and expect them to provide systems that are capable of being secured. 

Most older SCADA systems (most systems in use) have no security features whatsoever. SCADA system owners must insist that their system vendor implement security features in the form of product patches or upgrades. Some newer SCADA devices are shipped with basic security features, but these are usually disabled to ensure ease of installation. 

Where backdoor or vendor connections do exist in SCADA systems, strong authentication must be implemented to ensure secure communications. Modems, wireless, and wired networks used for communications and maintenance represent a significant vulnerability to the SCADA network and remote sites. Successful war dialing or war driving attacks could allow an attacker to bypass all other controls and have direct access to the SCADA network or resources. To minimize the risk of such attacks, disable inbound access and replace it with some type of callback system. 

Any location that has a connection to the SCADA network is a target, especially unmanned or unguarded remote sites. Conduct a physical security survey and inventory access points at each facility that has a connection to the SCADA system. Identify and assess any source of information including remote telephone/ computer network/fiber optic cables that could be tapped radio and microwave links that are exploitable computer terminals that could be accessed and wireless local area network access points. Identify and eliminate single points of failure. The security of the site must be adequate to detect or prevent unauthorized access. Do not allow live network access points at remote, unguarded sites simply for convenience. 

Establish policies and conduct training to minimize the likelihood that organizational personnel will inadvertently disclose sensitive information regarding SCADA system design, operations, or security controls. 

Young, M. A. 2004. SCADA systems security. Bethesda, MD SANS Institute. 

W. Cyber-security/Supervisory Control and Data Acquisition (SCADA) system attack response (other than incident-specific, e.g., hacker)... 

An alarm system is a type of electronic monitoring system that is used to detect and respond to specific types of events—such as unauthorized access to an asset, or a possible fire. In chemical processing systems, alarms are also used to alert operators when process operating or monitoring conditions go out of preset parameters (i.e., process alarms). These types of alarms are primarily integrated with process monitoring and reporting systems (i.e., SCADA systems). Note that this discussion does not focus on alarm systems that are not related to a facility s processes. 

In this section, those devices necessary for communication and integration of industrial chemical processing operations, such as electronic controllers, two-way radios, and wireless data communications are discussed. Typically, SCADA systems would also be discussed in this section however, SCADA was discussed in detail in chapter 7. 

D. Complex configurable SCADA system Automated workstations for tablet assay... 

E. Bespoke (custom) SCADA system Custom-designed automation systems... 

Cal-Tech Management Associates, SCADA Systems, Inc., and Davis, G. A., Piasecki, B., and Mueller, M. J. October 1987. Waste Reduction Strategies for the Printed Circuit Board Industry. California Department of Health Services, Alternative Technology Section, Toxic Substances Control Division. Contract No. 85-00173. 

Control of the field occurs on two levels. The upper level Is the supervisory control and data acquisition (SCADA) system whose main responsibility is well flow rate control, well testing, production allocation, accounting and general field monitoring. The SCADA system is operated from the Main Operations Center (MOC) which is remote from all three GCs. The second level of control is process control in the individual GCs. Flow to the GCs Is normally controlled by the SCADA system (HOC operator), but the GC operator can override and control well flow rates in case of SCADA system failure or other unusual circumstances. The GC operator and the MOC operator communicate via a dedicated telephone connection. 

Since the operation is in an arctic environment, achieving the above objectives presents particular problems and would be difficult and Inefficient using the more conventional approaches. Therefore, as part of the original facilities a "supervisory control and data acquisition" (SCADA) system was Installed in the VfOA. The operational philosophy is one where, by means of the SCADA system, the functions necessary for reservoir management and production control could be monitored and controlled from a central location called the Main Operations Center [Pg.57]

Although the SCADA system is capable of on/off control functions such as opening and closing valves, supervisory setpoint control, and scanning of large... 

To accomodate all the necessary data acquisition and control associated with the field expansion, a modified or expanded SCADA system was required. 

The Prudhoe Bay facilities could not have been operated with the flexibility and precision that currently exists without the benefit of the centralized control and monitoring facility that a SCADA system and computer provide. This is particularly true of the unique production allocation, production control and well testing system. 

Most DCS were, and still are, being sold to refineries and chemical plants where the distances involved and the environment do not require microwave communication. Responding to the market demand, few manufacturers were interested in developing the technique. Such systems that were available were, quite naturally, configured around the concept of closed loop control at the PCM level. Consequently, none of them could compete with the SCADA system in terms of numbers of data acquisition points. Alternatively, none of the SCADA system manufacturers could provide a sufficiently intelligent remote unit to execute closed loop control. 

Microprocessor-based control systems are marketed under a variety of acronyms and not all will be true DCCSs. Of particular note are the Supervisory Control and Data Acquisition (SCADA) systems which form an increasingly central part of the operations of many industries (e.g. offshore oil and gas platforms, petrochemical complexes, pulp and paper works). SCADA describes a communications system whose principal function is to join instrumentation and control into a cohesive package(57) and, particularly, the supervision and management of remote ... 

A SCADA System for the transmission system has been proposed to enhance operational requirements and safety. The SCADA system has been estimated to cost 15 million Euro. 

Using the elaborated theoretical and computing approaches a most effective pipeline management system has been conceptually elaborated with control modes at local level, station level and pipeline level. Local control is manually implemented from the device itself. The automatic or manual control of an installation is affected from its local micro-SCADA system. The supervisory pipeline control is effected from the active pipeline control centre. 

Any nonconformity to quality standards is fed back through the SCADA system, and the material is instantly discarded as waste until the automatic adjustments are made to bring quality into control. 

Stand-alone systems. Multiloop controllers) or programmable logic controllers (PLC) typically used to control part of a process, and larger supervisory control and data acquisition (SCADA) systems/distributed control systems (DCS) used to control the process or service as a whole (e.g., bulk primary production plant, building management systems). These self-contained systems are a component of an automated manu-... 

---