Knowledge database
Case Study: Improving Stability and Security of ICS Systems
Improving Stability and Security of ICS Systems
Project Background
The client operated an ICS (Industrial Control System) within the scope of automation and control, handling continuous process control. The industrial network was based on unmanaged switches connected in a ring topology, utilizing the MRP (Media Redundancy Protocol) with a 500 ms convergence time.
The network included HMI panels, PCLs, sensors, Modbus RTU/TCP gateways, operator and engineering stations. It was linked to another segment via a Layer 3 (L3) switch and used a Class C IPv4 addressing scheme.
Challenges
A recurring issue of communication instability between controllers and sensors was observed.
Problems included Modbus TCP communication interruptions, SCADA component unavailability, and process control failures. Occasional diagnostic tools failed to identify significant issues, leading to a tolerated state of malfunction.
Solution is on the other site - Move cursor to this paragraph.
Solution – Artemida System Implementation
To enhance OT system security and visibility, the L3 switch was replaced with a USS DNC 6041
device running IDCS 1.4.4 ADI, connected to the Artemida CCD central system. The Artemida
system quickly identified anomalies in communication and excessive ARP broadcasts originating from the engineering station.
Remediation Actions
The network topology was restructured by moving the engineering and operator stations outside the ring. USS DNC enabled retaining the same IP addressing while controlling traffic flow between ports. Virtual switch configurations and integrated IDS provided effective traffic segmentation and protection.
Outcomes and Benefits
The ICS system's stability improved significantly, reducing communication failures and increasing anomaly detection. Extending Artemida to other network segments provided broader monitoring and enhanced operational continuity and security
Final Thoughts
Many organizations focus primarily on external threats, overlooking architectural weaknesses and operational anomalies within OT environments. Artemida and USS DNC offer effective tools for detecting and resolving internal issues, elevating the reliability and cybersecurity of industrial systems.
