Industrial Cybersecurity: An Idea Whose Time Has Come?

  Enquire / contact me

Over 160 vendors offering a wide variety of hardware, software and services

Industrial Cybersecurity: An Idea Whose Time Has Come?
Industrial Cybersecurity: An Idea Whose Time Has Come?

The market for industrial cybersecurity products remains extremely immature, with currently over 160 vendors offering a wide variety of hardware, software and services. In contrast to other parts industrial automation markets, no one vendor dominates; and those with the highest market share typically specialise in a particular region, industry sector or technology. IHS believes there will be a shakeout - although the market will attract some new entrants, this will be largely offset by companies choosing to exit the business and by acquisition-driven consolidation.

Control systems already in use will sustain the market for "on-top" industrial cybersecurity hardware, software and services (control system upgrades are expensive and must be kept in place for many years to show a return on the investment); many of these systems are inherently insecure. A quiet revolution is already occurring in an industry more used to incremental improvement. Vendors of control systems have united around IEC 62443 (the international version of ISA-99) which, when finalised, will describe how to secure control system assets throughout their lifecycle (including development). Whereas security was an afterthought in earlier generations of control system, asset owners have pushed suppliers to restructure their products to implement security features which provide some inherent levels of protection. Only parts of the IEC 62443 standard have so far been released; but once the standard and certification services are available, all tier 1 vendors are expected soon to offer an IEC 62443 product.

It is likely that these products will have different levels of capability. IEC 62443 has seven major criteria for building secure components/systems. For these criteria, the IEC 62443 standard borrows some of the language of the safety world - the security levels "SL" are analogous to safety-integrated-levels, with levels ranging from 1 to 4 ( SL 1 being least secure, SL 4 being most secure) although the final security level depends on how the asset owner implements the component or system.

Overall, IHS projects a good but not spectacular growth rate for industrial cybersecurity hardware, software and service revenues, with an annual average growth rate of 12% from 2013 to 2019. The market will be sustained by the high number of legacy assets which require securing. Over a much longer 10-15 year timeframe, the demand for on-top hardware/software/services is likely to decrease, as fewer compensating controls will be required to secure control systems that are secure by design.

The largest "known unknown" remains legislation. IHS believes that legislation affecting the process and discrete industries is unlikely; as one of the lessons of NERC-CIP (industrial cybersecurity legislation affecting the power industry in North America) is clearly that it is possible to spend a lot of money without necessarily improving security. That said, all bets are off should a major incident occur; some government will be compelled to "do something". The effect of investment on profit is also a concern: the oil industry (both upstream and downstream) is one of major spenders on industrial cybersecurity products, as the high price of oil can support investment. However, the water industry, despite its importance to society, is not a major spender on these products, as it comprises smaller companies with prices often set by regulators.

Posted on September 25, 2014 - (274 views)
by
Related articles
Radar Sensors R&D Gets on a Flexible Track
UCB Life Scientists Use Robots to Test Cells by the Billion
Linear Transfer System with Smart Carriage Technology
Melfa FR Robot Series
Widescreen HMIs GT21 and GT25
Ready to Race
Turning Vision into Reality
Leading the Transformation of Smart Factories
Seamless Data Acquisition
Power Transmissions for Offshore E&P Applications
The Internet of Things Starts with a Sensor
Fan Filters FF Series
Handheld Optical Gas Imaging Camera GFx320
Technopolymer Transmission Elements
NS Series Safety Switches
Modbus TCP EtherCAT PROFINET
Level Switches RFS-12 and RFS-9
Multi-protocol Network Diagnostics
EMC Filter FN 3287 and FN 3288
LED Indicators
Cloud Kit for IoT Sensor Devices
Gasketed Plate Heat Exchangers
Verigo Model PB3 Reusable Temperature Data Logger
Ultrasonic Flowmeter for Laboratory
Co-Creating the Industry of the Future
Ultra-Low Power Accelerometer for IoT
New JD Mini for Maximum Efficiency
Bonfiglioli BSR Synchronous Reluctance Motors
Reflowable Thermal Switch
Measuring the Position of Hydraulic and Telescopic Cylinders