DeltaV™系統(tǒng)是PlantWeb的關(guān)鍵組成部分，被認(rèn)證為具有魯棒性防止網(wǎng)絡(luò)攻擊 德克薩斯5月29日新聞――艾默生過(guò)程管理公司今天宣布其DeltaV™控制器和防火墻已經(jīng)通過(guò)了Achilles一級(jí)認(rèn)證測(cè)試，該認(rèn)證測(cè)試旨在評(píng)估自動(dòng)化控制器的整體安全性。DeltaV認(rèn)證通過(guò)了超過(guò)2000萬(wàn)項(xiàng)測(cè)試取得了一級(jí)認(rèn)證。該DeltaV數(shù)字系統(tǒng)是艾默生的PlantWeb®數(shù)字工廠架構(gòu)的關(guān)鍵組成部分，也是自動(dòng)化過(guò)程生產(chǎn)設(shè)備的全球領(lǐng)袖。 艾默生過(guò)程管理公司，市場(chǎng)，過(guò)程系統(tǒng)和解決方案部門(mén)副總裁Duncan Schleiss表示：“在DeltaV系統(tǒng)首次被開(kāi)發(fā)出來(lái)時(shí)就開(kāi)始致力于提供一個(gè)高度安全的控制網(wǎng)絡(luò)，這項(xiàng)努力一直在繼續(xù)，這次認(rèn)證通過(guò)是這種努力又邁進(jìn)了一步?！薄癉eltaV系統(tǒng)自初次投入市場(chǎng)開(kāi)始就已經(jīng)提供了如反病毒保護(hù)和基于角色的用戶安全性這樣一些安全特性，并被設(shè)計(jì)作為一個(gè)私有網(wǎng)絡(luò)使控制系統(tǒng)與其他任何非控制網(wǎng)絡(luò)分離。DeltaV防火墻的使用為DeltaV系統(tǒng)提供了一個(gè)即插即用的安全解決方案以展開(kāi)最近經(jīng)測(cè)試的安全方案?！? Achilles認(rèn)證計(jì)劃是由Wurldtech實(shí)驗(yàn)室及其合作者開(kāi)發(fā)的，旨在為安全工業(yè)控制器的認(rèn)證提供一個(gè)基準(zhǔn)。該計(jì)劃設(shè)計(jì)用于評(píng)定工業(yè)控制器的整體安全性，并對(duì)其安全性盡可能提供最完整，精確可信賴的信息。一級(jí)認(rèn)證集中關(guān)注二級(jí)和四級(jí)認(rèn)證，并執(zhí)行通用協(xié)議，如以太網(wǎng)，ARP, IP, ICMP及UPD。 測(cè)試自動(dòng)化控制器的挑戰(zhàn)在于缺乏有關(guān)賣主使用的協(xié)議棧詳細(xì)信息提供給賣主，尤其當(dāng)該協(xié)議棧與其私有的協(xié)議聯(lián)合使用時(shí)。Achilles認(rèn)證通過(guò)結(jié)合嚴(yán)格計(jì)算的測(cè)試包生成，并通過(guò)高度先進(jìn)的黑匣子監(jiān)控技術(shù)正式認(rèn)證解決了這個(gè)難題。復(fù)雜的測(cè)試包程序自動(dòng)生成使得精確跟蹤辨認(rèn)任意關(guān)注點(diǎn)以發(fā)現(xiàn)已知和未知錯(cuò)誤和弱點(diǎn)。 艾默生過(guò)程管理公司高級(jí)產(chǎn)品部經(jīng)理Bob Huba表示：“自動(dòng)化工程師可以更高程度的認(rèn)識(shí)到DeltaV控制器已經(jīng)通過(guò)了一組公認(rèn)的測(cè)試組和測(cè)試參數(shù)，”“獲得一級(jí)認(rèn)證的控制器已經(jīng)證明其防止網(wǎng)絡(luò)威脅的魯棒性。通過(guò)這些嚴(yán)格測(cè)試的一個(gè)實(shí)際的好處在于為用戶提供更好的計(jì)劃安全升級(jí)和新型反病毒信號(hào)的安裝能力。認(rèn)識(shí)到該控制器可以抵御可能發(fā)生的安全事故，這為計(jì)劃測(cè)試過(guò)程進(jìn)行的這些修補(bǔ)任務(wù)而非總是快速展開(kāi)更新提供了一次機(jī)遇?！? DeltaV系統(tǒng)（www.EasyDeltaV.com）結(jié)合了系列保護(hù)層，入侵者必需通過(guò)連續(xù)的保護(hù)設(shè)備層，深入防護(hù)，包括能夠在安全層內(nèi)實(shí)施的保護(hù)。DeltaV網(wǎng)絡(luò)位于保護(hù)層的中間，這提供了盡可能多的系統(tǒng)隔離，避免收到工廠LAN網(wǎng)絡(luò)空間的攻擊。用于任意自動(dòng)化系統(tǒng)的這項(xiàng)基本安全策略用于管理用戶和網(wǎng)絡(luò)進(jìn)入系統(tǒng)以保護(hù)控制器收到攻擊。 有關(guān)Wurldtech Wurldtech安全科技公司（www.wurldtech.com）總部位于加拿大BC范庫(kù)費(fèi)峰，是SCADA，過(guò)程控制和核心業(yè)務(wù)行業(yè)安全解決方案的龍頭供貨商，公司成立于2006年，基于不列顛哥倫比亞理工學(xué)院的研究工作，致力于提供突破性的產(chǎn)品和服務(wù)，幫助保護(hù)全球關(guān)鍵基礎(chǔ)設(shè)施，并為全球主要工業(yè)組織和政府機(jī)構(gòu)提供安全需求。 艾默生過(guò)程管理（ www.emersonprocess.com）,是艾默生業(yè)務(wù)的一部分，是化工、石油天然氣、精練、紙漿與造紙、電力、飲用水和廢水處理、食品與飲料、生命科學(xué)和其它工業(yè)生產(chǎn)、過(guò)程和分配自動(dòng)化的行業(yè)領(lǐng)袖。艾默生過(guò)程管理將先進(jìn)的產(chǎn)品和技術(shù)結(jié)合在為特定工業(yè)而設(shè)計(jì)的工程、咨詢、項(xiàng)目管理和維護(hù)服務(wù)之中。艾默生過(guò)程管理旗下的品牌有：PlantWeb®, DeltaV™, Fisher®, Micro Motion®, Rosemount®, Mobrey®, Bristol®, Daniel®, Ovation®,以及AMS™組件。 original text： [COLOR=#708090]Emerson’s DeltaV™ controller and firewall achieve Achilles Level 1 cyber-security certification DeltaV system, a key PlantWeb® component, is recognized for robustness against cyber threats AUSTIN, TEXAS （May 29, 2007） - Emerson Process Management today announced that its DeltaV™ controller and firewall have passed Achilles Level 1 Certification Testing designed to assess the overall security of automation controllers. The DeltaV certification passed over 20 million tests to achieve Level 1 certification. The DeltaV digital system is a key component of Emerson’s PlantWeb® digital plant architecture, a global leader in automation of process manufacturing facilities. "This is another step in our on-going effort to provide a highly secure control network that began when the DeltaV system was first developed," said Duncan Schleiss, vice president of marketing, Process Systems and Solutions, for Emerson Process Management. "Starting from the initial release, the DeltaV system has provided such security features as anti-virus protection and role-based user security, and is architected as a private network to keep the control system separate from any non-control networks. The use of DeltaV firewalls provides a plug-and-play security solution for DeltaV systems to deploy recently tested security solutions." The Achilles Certification Program was developed by Wurldtech Labs and its partners to provide a benchmark for certification of secure industrial controllers. The program is designed to assess the overall security of industrial controllers and provide the most complete, accurate and trustworthy information possible on their security. Level 1 certification focuses on layers 2 to 4 and the implementation of common protocols such as Ethernet, ARP, IP, ICMP and UPD. The challenge in testing automation controllers lies in a lack of detailed information available to vendors about the protocol stacks they are using, especially when used in conjunction with their own proprietary protocols. Achilles certification overcomes this problem by combining mathematically rigorous test-packet generation and stateful recognition with highly advanced black box monitoring techniques. Complex sequences of test packages generated automatically enable precise trace identification for any points of concern to discover both known and unknown errors and vulnerabilities. "Automation engineers can have a higher degree of comfort knowing that DeltaV controllers have passed an accepted set of test suites and test parameters," said Bob Huba, senior product manager for Emerson Process Management. "Controllers with Level 1 certification have demonstrated the robustness to survive network cyber attacks. One real benefit of passing these rigorous tests is to provide users with the ability to better plan the installation of security updates and new anti-virus signatures. Knowing that the controllers can survive a possible security incident provides an opportunity to schedule these patching tasks around process activities rather than always immediately deploying the updates." The DeltaV system （www.EasyDeltaV.com） combines the rings of protection, in which an intruder must get past successive layers of protection devices, with defense in depth, consisting of protections enabled within the security rings. The DeltaV network sits at the center of protection layers that provide as much system isolation as possible from attacks originating in the plant LAN network space. The basic security strategy for any automation system is to manage user and network access to the system to protect the controller from attack. About Wurldtech Wurldtech Security Technologies （www.wurldtech.com）, headquartered in Vancouver, BC, Canada, is the leading provider of security solutions to SCADA, process control and mission-critical industries. Founded in 2006 based on research conducted at the British Columbia Institute of Technology （BCIT）, Wurldtech is committed to delivering breakthrough products and services that help protect global critical infrastructure and address the security needs of major industrial organizations and government agencies worldwide. Emerson Process Management （ www.emersonprocess.com）, an Emerson business, is a leader in helping businesses automate their production, processing and distribution in the chemical, oil and gas, refining, pulp and paper, power, water and wastewater treatment, food and beverage, life science, and other industries. The company combines superior products and technology with industry-specific engineering, consulting, project management and maintenance services. Its brands include PlantWeb®, DeltaV™, Fisher®, Micro Motion®, Rosemount®, Mobrey®, Bristol®, Daniel®, Ovation®, and AMS™ Suite.[/COLOR]