Subscribe to be notified for updates: RSS Feed

Gilles Loridon

Home
Industrial Control Systems Cyber Security
Gilles Loridon

Gilles Loridon

CEO, Global Security Network

Gilles LORIDON has worked in IT and cybersecurity for 23 years. Gilles started his career as a Software Developer in Canada, USA and France. Since 1999 with GSN, Gilles has been implementing successful InfoSec projects for governmental Agencies and Energy Companies in EMEA such as Audits, VA/PT, ISMS implementations.

Cases Studies: Implementing IEC 62443 Zones & Conduits in the real world.

Industrial Control Systems Cyber Security

Abstract: Keyword: ICS cybersecurity, IEC 62443, Modbus security, Unidirectional gateway.

The goal of this presentation is to explain the challenges and the lessons learned when implementing Zone & Conduit IEC 62443 in three different cases for Energy Companies. IEC 62443 is rather new for IT Network and OT Engineers. Moreover, it creates specific challenges which are unusual and with very little operating experience.

The first case study is the conduit between off-shore platform supervision zone and a external third party network. It is the near real-time production database replication between an off-shore oil rig and a third party external network.

The second case study is the security of the conduit between Layer 3 and Layer 4 zone. In this case the customer needed real-time transfer of production data between an on-shore gas production site layer 3 and the layer 4 on the Corporate IT LAN.

The third case study is the segregation of Safety Systems from the Control Systems within the site communicating with Modbus. IEC 62443 requires segregation but US NRC 5.71 requires deterministic one way communication. Very few companies have successfully implement this level of segregation of Critical Digital Assets in MEA.

Copyright 2016 DMS Global - Design by DMS Cybernation