Secure remote access to autonomous safety systems: A good practice approach

International Journal of Autonomous and Adaptive Communications Systems

Volumn 2, Issue 3, 2009, Pages 297-312

  Jaatun, Martin Gilje ^a   Line, Maria B ^a   Grøtan, Tor Olav ^b  

^a SINTEF ICT   (Norway)

^b SINTEF TECHNOLOGY AND SOCIETY   (Norway)

Author keywords

Offshore; Process control; Safety instrumented systems; Secure remote access; SIS

Indexed keywords

NATURAL GASOLINE PLANTS; NETWORK ARCHITECTURE; NETWORK LAYERS; NETWORK SECURITY; OFFSHORE OIL WELL PRODUCTION; PROCESS CONTROL; SECURITY SYSTEMS; SILICON;

INTEGRATED OPERATIONS; IP-BASED NETWORKS; OFFSHORE; OPERATING COMPANIES; SAFETY INSTRUMENTED SYSTEMS; SAFETY INTEGRITY; SECURE REMOTE ACCESS; SECURITY ISSUES;

SURVEYING INSTRUMENTS;

EID: 78751501864     PISSN: 17548632     EISSN: 17548640     Source Type: Journal    
DOI: 10.1504/IJAACS.2009.026788     Document Type: Article

References (21)

1. Byres, E., Karsch, J. and Carter, J. (2005) 'Good practice guide - firewall deployment for SCADA and process control networks', Technical Report, British Columbia Institute of Technology, on behalf of NISCC, Available at: http://www.cpni.gov. uk/docs/re-20050223-00157.pdf.
2. Forskrift om Styring i Petroleumsvirksomheten (Styringsforskriften) (2004) §1.
3. Functional Safety - Safety Instrumented Systems for the Process Industry Sector, (2003) IEC std 61511.
4. Functional Safety of E/E/PE Safety-Related Systems (1998) IEC std 61508.
5. Grøtan, T. O. (2006) 'Secure safety in remote operations', Proceedings of ESREL 2006, Estoril, Portugal.
6. Grøtan, T. O. and Albrechtsen, E. (2008) 'Risikokartlegging og analyse av Integrerte Operasjoner (IO) med foksus pa a synliggj0re kritiske MTO aspek-ter [Risk identification and analysis of integrated operations concerning MTO aspects]', Technical Report STFA7085 SINTEF.
7. Grøtan, T. O., Albrechtsen, E., Rosness, R. and Bjerkebask, E. (2008) 'The influence on organizational accident risk by integrated operations in the petroleum industry', Proceedings of Working on Safety.
8. Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security (2006) 'NIST special publication 800-82 (initial public draft)', Available at: http://csrc.mst.gov/publications/drafts/800-82/Draft- SP800-82.pdf.
9. Hazard and Operability Studies (HAZOP Studies) - Application Guide (2001) IEC std 61882.
10. Information Technology - Security Techniques - Evaluation Criteria for IT Security (2005) ISO/IEC std 15408, Available at: http://www. commoncriteriaportal.org/.
11. Information Technology - Security Techniques - Information Security Management Systems - Requirements (2005) ISO/IEC std 27001.
12. IT Grundschutz Manual (2004) Available at: http://www.bsi.de/english/ gshb/manual/.
13. Kerckhoffs, A. (1883) 'La cryptographie militaire', Journal des Sciences Mil-itaires, Vol. IX, pp. 5-38.
14. Kosmowski, K. T., Sliwinski, M. and Barnert, T. (2006) 'Functional safety and security assessment of the control and protection systems', Proceedings of ESREL 2006, Estoril, Portugal.
15. Line, M. B., Nordland, O., Rostad, L. and Tondel, I. A. (2006) 'Safety vs security?', Proceedings of PSAM 8, New Orleans.
16. Naedele, M. (2005) 'Standardizing industrial IT security - a first look at the IEC approach', Proceedings of 10th IEEE Conference on Emerging Technologies and Factory Automation, Vol. 2, p. 7.
17. NISCC Good Practice Guide - Process Control and SCADA Security (2005) Technical Report PA Consulting Group on behalf of NISCC, Available at: http://www.cpni.gov.uk/docs/re-20051025-00940.pdf.
18. OLF Guideline 104: Information Security Baseline Requirements for Process Control, Safety, and Support ICT Systems (2006) Available at: http://www.olf.no/935820.pdf.
19. Schoitsch, E. (2006) 'Design for safety and security of complex embedded systems: a unified approach', Cyberspace Security and Defense: Research Issues, Vol. 196 of NATO Science Series II - Mathematics, Physics and Chemistry.
20. The PDS Webpage (n. d.) Visited on 9 March 2007, Available at: http://www.sintef.no/static/tl/projects/pds/www/.
21. Whitepaper: Tenix Interactive Link Data Diode (2006) Visited on 16 March 2007, Available at: http://www.tenixamerica.com/images/white-papers/TenixIL- DataDiode.pdf.