Industrial control systems used to control petrochemical refining and manufacturing deserve the highest level of protection from SCADA security and control system security threats. Cyber security threats from the most commonplace malware to today’s pervasive targeted attacks are serious risks to the safe, reliable and continuous operation of the large, complex and costly physical systems in today’s downstream operations.

Unidirectional Security Gateway products and technologies are deployed routinely provide stronger-than-firewall solutions for reliability-critical and safety-critical infrastructures. Unidirectional Security Gateways provide safe IT/OT integration by replicating industrial servers and devices to business networks through a system of hardware modules that physically prevents any attack from reaching back into the protected critical control system network. Unidirectional Gateways replace firewalls, which have proven inadequate to the needs of reliability-critical and safety-critical networks. Every path through a firewall that permits data to leave a critical network for use by an enterprise, also allows attacks to pass back into that critical network. Unidirectional Security Gateways enable safe IT/OT integration, without the serious security risks that always accompany firewalls.

Waterfall Security Solutions is focused exclusively on the protection of industrial control system networks, and is the market leader for Unidirectional Security Gateway technology. Waterfall products used routinely in refining and petrochemical manufacturing operations include:

  • Secure historian database replication
  • Secure SQL database replication
  • Secure OPC server replication
  • Secure file server replication
  • Remote Screen View

Waterfall’s products are recognized by leading oil & gas and industrial control systems standards and standards bodies, including:

National Institute of Standards and Technology (NIST) in their NIST 800-82r2 standard

French ANSSI standards

The North American Electric Reliability Corporation’s Critical Infrastructure version 5 and 6 standards (NERC CIP V5 and V6)

The International Society of Automation’s ISA SP-99 standards

The International Electrotechnical Commission’s 62443 series of standards.

In addition, the stronger-than-firewalls security provided by Unidirectional Security Gateway products simplifies and reduces the cost of compliance with SCADA security provisions in the Department of Homeland Security’s Chemical Facilities Anti-Terrorism Standards (DHS CFATS), International Organization of Standards (ISO) 27001, and American Petroleum Institute 1164 standards.

Firewalls and IT-centric security provisions are inadequate to control system security needs in downstream operations. Catalytic crackers, distillation towers, and polymer processing equipment cannot, after all, be “restored from backup” the way IT systems can be. Downstream operations are not expendable. The time has come to deploy Unidirectional Security Gateways instead of firewalls to enable safe IT/OT integration throughout downstream operations.