Cyber Security Deployment - ABB Uvisor SF910i User Manual

21 Cyber Security Deployment

21 Cyber Security Deployment
Cyber security measures need be taken to protect the reliability, integrity, and availability
of power and automation technologies against unauthorized access or attack. ABB
recognizes the importance of cyber security in control-based products/systems and
solutions for infrastructure and industry, and is working closely with the customers to
address the new challenges.
Below measures are strongly suggested:
– On physical access: The device local configuration can only be done manually by
workers near the device and through touch key buttons, where the products are
located near the burners, where is physically protected area in customer site
(including commissioning, configuration, maintenance phase, and so on), and only
authorized workers can access it, which is the trust boundary.
– On interacting with the products: The touch key buttons could only be operated
by human finger with certain keying speed using specific buttons-combination that
are accepted to avoid wrongly pressing, and specific configuration value rules are
applied to avoid wrong value setting.
– On ATB/CPU board: Not open/disassemble the ATB + CPU + SE board. Do not
touch or operate the CPU programming interfaces in the CPU board located inside
the enclosure/beneath the ATB (termination board) PCBA, which are sealed and
not allowed customer to access through warranty paper (anti-tear sticker). Otherwise,
the warranty is also lost.
– On Modbus communication: Secure the Modbus RS485 communiation lines are
not attacked/destroyed/interfered/traced/spoofed by outsiders, for example, through
physics restriction on related wiring/looping area. And plant management engineers
shall strictly manage the MODBUS/RTU network and ensure that all other devices
connected to the network are fully trusted.
– On Modbus host: As stated in SF910i Flame Explorer User Manual (8VZZ005308).
8VZZ005286 B 129