Prospecção de tecnologias para aumentar a segurança em sistemas SCADA

Abstract

Essential services for people such as electricity, transport, water supply, food and others are controlled by systems of supervision and control. Most people may not know the importance of such systems, but monitoring and guarantee of perfect performance take us the welfare, safety and good life. The use of supervisory and control systems in industrial environments began from the 60s and has since followed the growth and modernization achieved by computer technology. The changes undergone have evolved to open protocols and systems, COTS products and widespread use of internet communications. Then, it was created an environment with considerable possibilities of attacks on these systems, making them vulnerable to the same threats and risks of these new technologies. However, as the environment of Automation priorities are not the same an environment of Information Technology, one must understand the technologies, the pros and cons before implementing them. The theme of this dissertation is to explore technologies to increase the safety system of control and supervision. As a result of the research, a set of technologies is selected for use in any industrial network, regardless of the area of operations of the company. The understanding of what would be the supervisory and data acquisition and its evolution, the main regulations to the subject of Information Security and key differences between the environments of Industrial Automation and IT are addressed in this work. The major threats and vulnerabilities that affect the systems and key technologies and countermeasures are explained on the basis of literature. With the goal of providing a practical use for this research, a questionnaire was prepared and, considering the selected technologies and countermeasures, also provides inputs for the company, to get a security assessment of your industrial automation environment. The questionnaire was applied in 10 industrial units and obtained, as a result, a current view of system security control of each of these units.