下载PDF
Securing ICS/SCADA Network: A Case Study of Central Hidroeléctrica de Caldas
技术
- 自动化与控制 - 监督控制和数据采集 (SCADA)
- 网络与连接 - 网关
适用行业
- 电网
- 国家安全与国防
适用功能
- 物流运输
- 质量保证
用例
- 篡改检测
- 交通监控
服务
- 网络安全服务
- 系统集成
挑战
Central Hidroeléctrica de Caldas (CHEC) 是哥伦比亚的一家主要发电商和分销商，在确保其监控和数据采集 (SCADA) 设备安全方面面临着重大挑战。这些设备位于发电厂和变电站，监视和控制跨地区供电的输电和配电网络。然而，这些 SCADA 系统是多年前部署的，当时网络安全控制被认为是必要的。因此，他们很容易受到网络攻击，这些攻击可能会损害一个或多个 SCADA 设备并获得对重要系统的控制权。此外，发电量超过 100 兆瓦的发电厂和传输超过 115 千瓦的变电站必须遵守哥伦比亚米纳斯能源部和能源天然气监管委员会规定的安全控制。面临的挑战是保护 SCADA 设备的安全，以防止攻击者渗透网络并满足政府对发电厂的安全要求，同时在恶劣、恶劣的环境中运行。
关于客户
Central Hidroeléctrica de Caldas (CHEC) 是哥伦比亚的主要发电商和分销商。它是哥伦比亚第二大商业集团 Grupo EPM 的一部分。 CHEC 成立于 1944 年，率先为卡尔达斯咖啡种植区的街道照明提供电力。目前，中国港湾已覆盖40个城市，城市电力覆盖率100%，农村电力覆盖率99.62%，为近50万客户提供电力和照明。随着公司的发展和巩固其发电能力，它建立了输配电网络以在各地区提供电力。这些网络由位于发电厂和变电站的 SCADA 设备进行监控和控制。
解决方案
为了应对这些挑战，CHEC 转向了 Check Point 的 1200R 加固网关和 R80 网络安全管理。该团队设计了一个概念验证，以在其环境中测试 1200R 坚固型网关，在一个变电站中以监控模式安装网关，并在另一个变电站中以在线模式安装第二个系统。 1200R 网关专为在恶劣环境中部署而设计，提供集成安全性，作为完整的端到端工业控制系统 (ICS) 安全解决方案的一部分。它实现了 SCADA 流量的完全可见性和精细控制，使团队能够记录 SCADA 协议（包括命令）以进行取证分析。 R80 网络安全管理系统提供了单一管理平台，用于管理整个 SCADA 环境的安全性，并在单一系统中提供策略、日志记录、监控、事件关联和报告。多个团队成员可以同时在 Check Point R80 中工作而不会发生冲突，从而简化了跨地点的管理。 Check Point Smart-1 5050 设备还用于整合多达 50 个系统的管理，提供全面的威胁可视性和 SCADA 流量控制。
运营影响
数量效益
相关案例.
Case Study
Hydro One Leads the Way In Smart Meter Development
In 2010, Ontario’s energy board mandated that time-of-use (TOU) pricing for consumers be available for all consumers on a regulated price plan. To meet this requirement, Hydro One needed to quickly deploy a smart meter and intelligent communications network solution to meet the provincial government’s requirement at a low cost. The network needed to cover Hydro One’s expansive service territory, which has a land mass twice the size of Texas, and its customers live in a mix of urban, rural, and remote areas, some places only accessible by air, rail, boat or snowmobile. Most importantly, the network needed to enable future enterprise-wide business efficiencies, modernization of distribution infrastructure and enhanced customer service. To meet these needs, Hydro One conceptualized an end-to-end solution leveraging open standards and Internet Protocols (IP) at all communication levels. The utility drew upon industry leaders like Trilliant to realize this vision.
Case Study
Selling more with Whirlpool
Whirlpool wanted to add connectivity to appliances and transform the company's relationship with customers. Traditionally, Whirlpool interaction with customers was limited to purchases made once every ten years. Connected washer and dryers provide exciting new features like remote management of start times and inter-machine communication.
Case Study
SAS® Analytics for IoT: Smart Grid
Companies face falling revenues, rising infrastructure costs, and increasing risk of outages caused by inconsistent energy production from renewable sources. Less money is coming in as more people and organizations take steps to curb their energy use. Utilities are paying more to maintain and build infrastructure due to increasing complexity, resulting from the rising number of intermittent and variable renewable energy sources connected in the distribution grid.
Case Study
Enel Secures Italian Power Generation Network
Electric energy operators around the world are working to increase the reliability and cyber resiliency of their systems. This includes Enel, a global power company that manages and monitors the Italian power grid. This grid:• Serves 31 million customers• Has a net installed energy capacity exceeding 31 gigawatts• Includes more than 500 power generation plants,including hydroelectric, thermoelectric, and wind• Is managed and monitored by Enel 24/7/365• Is operated by Terna, the Italian Transmission System Operator (TSO)Enel is responsible for the availability of the grid’s underlying ICS and industrial network. It also manages Regional Control Centers and Interconnection Centers which connect with the TSO. The TSO manages the flow of energy to the grid plus controls and remotely regulates the power generation of power plants, increasing and decreasing power production as required. The complex system of interaction and cooperation between Enel and the TSO has strong security implications as well as operational and business challenges.
Case Study
IoT based Energy Quality Availability Monitoring Solution
There were several challenges faced:Since this data would be in the public domain, accuracy and authenticity of this data were of paramount importance. It should be able to withstand scrutiny.It is challenging to build an appliance that can withstand a wide range of voltage fluctuations from as low at 90v to as high as 320v. Since the device would be installed in remote locations, its resilience was of paramount importance.The device would have to deal with poor network coverage and have the ability to store and re-transmit data if networks were not available, which is often the case in rural India. The device could store up to 30 days of data.The platform that deals with the data should be readily available and highly reliable and never lose a packet of data.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
