Industrial control systems used to control the transport and storage of petroleum products deserve the highest level of protection from SCADA security and control system security threats. Occupational safety, environmental safety and public safety priorities demand reliable and trustworthy industrial control systems to facilitate human oversight of complex physical processes. Security threats from the most commonplace malware to today’s pervasive targeted attacks must all be addressed and mitigated.

Unidirectional Security Gateway products and technologies are deployed routinely throughout pipelines, natural gas terminals and other midstream operations to provide stronger-than-firewall solutions for reliability-critical and safety-critical infrastructures. Unidirectional Security Gateways provide safe IT/OT integration by replicating industrial servers and devices to business networks through a system of hardware modules that physically prevents any attack from reaching back into the protected critical control system network. Unidirectional Gateways replace firewalls in this role. Firewalls are inadequate to the needs of reliability-critical and safety-critical networks, because every path through a firewall that permits data to leave a critical network for use by an enterprise, also allows attacks to pass back into that critical network.

Waterfall Security Solutions is focused exclusively on the protection of industrial control system networks, and is the market leader for Unidirectional Security Gateway technology.

Waterfall products used routinely in midstream operations include:

  • Secure historian database replication
  • Secure SQL database replication
  • Secure OPC server replication
  • Secure file server replication

Waterfall’s products are recognized by leading oil & gas and industrial control systems standards and standards bodies, including:

National Institute of Standards and Technology (NIST) in their NIST 800-82r2 standard

French ANSSI standards

The North American Electric Reliability Corporation’s Critical Infrastructure version 5 and 6 standards (NERC CIP V5 and V6)

The International Society of Automation’s ISA SP-99 standards

The International Electrotechnical Commission’s 62443 series of standards.

In addition, the stronger-than-firewalls security provided by Unidirectional Security Gateway products simplifies and reduces the cost of compliance with SCADA security provisions in the Department of Homeland Security’s Chemical Facilities Anti-Terrorism Standards (DHS CFATS), International Organization of Standards (ISO) 27001, and American Petroleum Institute 1164 standards.

Firewalls are inadequate protections for safety-critical and reliability critical SCADA security and control system security programs. Upstream operations are not expendable. The time has come to deploy Unidirectional Security Gateways to enable safe IT/OT integration in today’s digital oilfields.