Representative End User Clients
Representative Automation Clients
Representative Software Clients
A recent Wall Street Journal CIO Journal post discussed Google's new approach to enterprise security - moving its corporate applications to the Internet. This move by the Internet giant will flip the traditional cyber security model on its head, in a shift away from using a trusted corporate network and network perimeter devices such as firewalls. The new model will allow corporate applications and data to be accessed anywhere - with the right device and the
Google's new model, called the BeyondCorp initiative, assumes an internal corporate network is as untrusted as the internet. For Google, access uses authentication, authorization and encryption to grant access to data and resources residing in the cloud. Google believes the more employees use cloud services and mobile devices, the more this model will be required. The security setup does away with conventional virtual private network connections to corporate networks and encrypts employee connections to corporate applications in the cloud wherever an employee may be. Not entirely new, the Jericho Forum www.opengroup.org has been talking about concepts like “De-perimeterisation” for over a decade.
For the industrial internet of things, the term 'asset' takes on a different meaning. In the industrial setting assets are not just computing devices. Assets now include a variety of industrial machines like compressors, pumps, conveyors and other industrial equipment. Many of these devices are connected today in some manner within a plant or facility, while others may be far-flung and geographically dispersed. Regardless of the physical location of industrial assets, and whether they are industrial devices or computing devices used by people, the business need to better manage operations and maintenance remains constant.
Industrial technology is not without its fair share of legacy hardware and systems. Connecting more devices to create the value of IIoT will not scale well if traditional models like the 1989 Purdue Reference Model for CIM or ISA-95 model are applied. The Perdue model of computer integration and ISA-95 layered architectures were developed long before IIoT and Cloud services became mainstream. In fact, many of the cybersecurity standards such as ISA-62443 were developed to address much of the legacy architecture layers that exist today. If we were to start fresh to build value associated with the IIoT today, we would likely just build it in the Cloud and connect the device directly to the Internet, similar to how Google’s enterprise model flips cyber security on its head. In many cases assets such as those found in the industry will bypass corporate networks and leverage a device level security model without traditional network security architecture. ARC Analyst Sid Snitkin writes about the Future of Industrial Cyber Security here and discusses device level security.
Google's new model, called the BeyondCorp initiative, assumes an internal corporate network is as untrusted as the internet. For Google, access uses authentication, authorization and encryption to grant access to data and resources residing in the cloud. Google believes the more employees use cloud services and mobile devices, the more this model will be required. The security setup does away with conventional virtual private network connections to corporate networks and encrypts employee connections to corporate applications in the cloud wherever an employee may be. Not entirely new, the Jericho Forum www.opengroup.org has been talking about concepts like “De-perimeterisation” for over a decade.
For the industrial internet of things, the term 'asset' takes on a different meaning. In the industrial setting assets are not just computing devices. Assets now include a variety of industrial machines like compressors, pumps, conveyors and other industrial equipment. Many of these devices are connected today in some manner within a plant or facility, while others may be far-flung and geographically dispersed. Regardless of the physical location of industrial assets, and whether they are industrial devices or computing devices used by people, the business need to better manage operations and maintenance remains constant.
Industrial technology is not without its fair share of legacy hardware and systems. Connecting more devices to create the value of IIoT will not scale well if traditional models like the 1989 Purdue Reference Model for CIM or ISA-95 model are applied. The Perdue model of computer integration and ISA-95 layered architectures were developed long before IIoT and Cloud services became mainstream. In fact, many of the cybersecurity standards such as ISA-62443 were developed to address much of the legacy architecture layers that exist today. If we were to start fresh to build value associated with the IIoT today, we would likely just build it in the Cloud and connect the device directly to the Internet, similar to how Google’s enterprise model flips cyber security on its head. In many cases assets such as those found in the industry will bypass corporate networks and leverage a device level security model without traditional network security architecture. ARC Analyst Sid Snitkin writes about the Future of Industrial Cyber Security here and discusses device level security.