Integration of NitroView SIEM and Waterfall Unidirectional Security Gateways Combine Maximum Perimeter Security With End-to-End Control System Visibility.

NitroSecurity, Inc., the leader in high-performance, content-aware security information and event management solutions (SIEM), and Waterfall Security Solutions Ltd., the leading provider of Unidirectional Security Gateways, today announced the integration of the NitroView SIEM portfolio and Waterfall’s Unidirectional Security Gateways. The integration combines absolute physical layer security with full enterprise-wide security monitoring and management, including SCADA and process control systems that are otherwise “invisible” to IT security monitoring solutions.

Unidirectional Security Gateways protect critical assets and infrastructures by only allowing outbound communications. All inbound traffic is blocked at the physical layer — making it an ideal medium for the secure transport of SCADA and control system protocols associated with control system supervision. NitroView SIEM, in turn, is uniquely capable of monitoring these protocols and system activity, and correlating it with broader event activity across control system and business networks. This new integration allows NitroView to effectively report over Unidirectional Gateways and collect logs and events from the Waterfall Gateway. This results in end-to-end security monitoring and analysis — a common, but difficult to achieve requirement of NERC CIP, NEI 08/09, and other security regulations and recommendations. This monitoring can also detect anomalous outbound traffic, which may be an indication of malicious insider activity or threats introduced by other means.

“Unidirectional Security Gateways provide the ultimate in perimeter defense, by preventing any traffic from entering the secure area at the physical layer while allowing SCADA protocols to get out without any chance of a threat getting in,” said Eric Knapp, Director of Critical Infrastructure Markets for NitroSecurity. “However, sometimes a threat might manage to get around the gateway, using a USB stick for example, or it might initiate from the inside, altering control system operations, or infecting process control elements such as RTUs and PLCs. NitroView can detect those incidents, and report them back out across the Unidirectional Gateway.”

Once outside of the protected control system, additional NitroView systems can correlate any detected risks or threats to other activities occurring within the supervisory or business LANs. “Together the products improve both the overall defense-in-depth capabilities of the critical systems, as well as the overall situational awareness of the system as a whole. It’s a win-win for customers and added peace of mind in an increasingly dangerous threat environment,” said Lior Frenkel, Co-Founder and CEO of Waterfall.

About Waterfall Security Solutions

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways™ and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, CFATS and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI™ Historian, GE Proficy™ iHistorian, Siemens SIMATIC™ and GE OSM™ remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP. For further information, please visit www.waterfall-security.com.

About NitroSecurity

NitroSecurity develops high-performance security information and event management (SIEM) solutions that protect critical information and infrastructure. NitroSecurity solutions reduce risk exposure and increase network and information availability by removing the scalability and performance limitations of security information management. By partnering the industry’s fastest analytical tools with the leading solutions in ICS systems and management — such as OSIsoft’s PI System — NitroSecurity identifies, correlates and remediates threats to enterprise, SCADA and distributed control systems in minutes instead of hours, allowing organizations to quickly mitigate risks to their information and infrastructure. NitroSecurity serves more than 500 organizations in the energy, healthcare, education, financial services, government, retail, hospitality and managed services industries. For more information, please visit http://www.nitrosecurity.com.

All product and company names herein may be trademarks of their respective owners. 

View the article

Yahoo Finance, December 7, 2010

Waterfall Security Solutions, the leading provider of Unidirectional Security Gateways, announced today the successful completion of a security assessment, undertaken by the Idaho National Laboratory (INL), of Waterfall’s Unidirectional Security Gateway’s technology and products. The assessment was conducted as part of the Department of Homeland Security (DHS) Control Systems Security Program (CSSP).

The whole process, originating in 2009, was successfully concluded in July 2010, when INL released the final assessment report.

The assessment verified that the Waterfall system provides one-way communications between two different security zones. The physics of the system prevent any data transmission from the low security enclave to the high security enclave. Waterfall’s methodology of protecting an industrial network from an external connection in a lower security zone was verified by the assessment.

The assessment identified three software vulnerabilities, all associated with the software interfaces between the Waterfall gateway and third party applications. Obviously, as the security of the Waterfall product is built on a sound and verified physical basis, no vulnerability, including the three identified, can allow an attacker to move “upstream” from the Receive side to the Transmit side.

Waterfall’s patented cyber security solutions enable Utilities and Critical Infrastructures to securely connect their critical industrial networks to external networks, thus securely fulfilling their business needs without exposing these networks to risks and threats of cyber-attacks, cyber terror and hacking from the external, less secure networks. Waterfall’s cyber security solutions assists Utilities and Critical Infrastructures to achieve compliance with NERC-CIP, NRC, CFATS and other regulations and standards, as well as cyber-security policies and best-practices.

The final report also provided recommendations on measures that could further enhance the overall security of the product. Waterfall will shortly begin a second evaluation phase, where these recommendations and other enhancements are planned to be implemented.

“It was an honor being part of such a process, having our technology assessed by the cyber security experts at INL. This process is part with Waterfall’s strategy of a wide and open cooperation with vendors, regulators, customers and other third parties. We welcome anyone wishing to evaluate our technology or assess our products,” said Lior Frenkel, Co-Founder and CEO of Waterfall Security Solutions, “Our large and expanding installed based in North America, will appreciate the added confidence provided by an INL cyber security assessment.”

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways(TM) and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, CFATS and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI(TM) Historian, GE Proficy(TM) iHistorian, Bently Nevada System1, Siemens SIMATIC(TM) and GE OSM(TM) remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

Yahoo Finance, September 15, 2010

Waterfall Security Solutions Ltd (Waterfall) reported today that it has finalized an operational implementation at Petroleum & Energy Infrastructures Ltd (PEI), a leading oil products and infrastructure company.PEI’s Chief Information Officer commented that “Our networks and facilities are serving the nation’s energy infrastructure. Providing real-time monitoring information out of these networks is an important business and operational need. Waterfall’s Security Gateway, inherently supporting SCADA protocols and industrial applications, enables us to achieve this, without the risk.”

Petroleum & Energy Infrastructures Ltd. is the leading corporation for oil products infrastructures in Israel. Fully owned by the Israeli government, the company provides state-of-the-art fuel oil infrastructure services to the country’s entire energy market. Though serving a national mission, PEI is an economic entity that functions according to market forces and changing conditions in the international arena.

The company’s activities span the full spectrum of infrastructure services, from export and import, to supply, storage and piping of fuel to all parts of Israel, as well as handling crude oil and refined products.

“We are happy to serve PEI’s security and regulatory needs with our unique technology and solutions,” said Lior Frenkel, Co-Founder and CEO of Waterfall Security Solutions. “Security risks for Oil and Gas infrastructures , facilities and pipelines are becoming more prevalent in the form of cyber terror and cyber threats. We see an increasing demand for our top security solutions from this market.”

Waterfall’s patented cyber security solutions enable Utilities and Infrastructures to fulfill their business needs of updating headquarters and other entities with real-time production information from the industrial networks, without exposing these networks to the risks and threats of cyber-attacks, cyber terror and hacking from the external, less secure networks.

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways(TM) and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, NIST and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI(TM) Historian, GE Proficy(TM) iHistorian, the Siemens SIMATIC(TM) and the GE OSM(TM) remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

Yahoo Finance, July 12, 2010

Waterfall Security Solutions Ltd, the leading provider of Unidirectional Security Gateways and data diodes, for secure network connectivity for Process Control Networks, SCADA systems, remote monitoring and segregated networks, introduced today Waterfall’s USA based offices and operations.

Waterfall’s patented cyber security solutions enable Utilities and Critical Infrastructures to securely connect their critical industrial networks to external networks, thus securely fulfilling their business needs without exposing these networks to the risks and threats of cyber attacks, cyber terror and hacking from the external, less secure networks.Waterfall’s cyber security solutions assist Utilities and Critical Infrastructures to achieve compliance with NERC-CIP, NRC, CFATS and other regulations and standards, as well as cyber-security policies and best-practices.

“Waterfall’s focus is on the North American Utilities and Critical Infrastructure markets. Our continuing success in these markets, resulting in a large and rapidly expanding customer base, amongst which are the highest and most prestigious of the Utilities and energy companies, accelerated our plans to open the local offices”, said Lior Frenkel, Co-Founder and CEO of Waterfall Security Solutions, “Our customers and prospects will profit from the added benefits from Waterfall’s local presence.We estimate that the process of fully activating the local offices shall be complete by end of 2010.”

Waterfall’s rapidly expanding installed-base was only one factor influencing Waterfall’s decision to make this move now. Recently, the Department of Homeland Security (DHS) has selected Waterfall’s technology to be an integral part of its national cyber security test-lab at Idaho National Laboratories (INL), Waterfall’s industrial network security patent was granted by the U.S. Patent and Trademark Office and many advancements and innovating new technologies were embedded into Waterfall’s products, making them even better, more advanced and technologically superior.

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways(TM) and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, CFATS and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI(TM) Historian, GE Proficy(TM) iHistorian, the Siemens SIMATIC(TM) and the GE OSM(TM) remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

Yahoo Finance, July 7, 2010

Waterfall Security Solutions has installed a Remote Screen View system at Israel Natural Gas Lines Ltd.’s operational site in Israel.

The product provides a secure way to send screen captures (video of the display screen from computers or control room) to external networks, if the facility needs remote assistance and/or technical support from vendors.

Israel was among the world’s five most vulnerable countries to cyber warfare against critical systems, McAfee (News – Alert) Inc. said in its Virtual Criminology Report 2009 . The four others were the United States, Russia, China and France.

“There have been increasing reports of cyber attacks and network infiltrations that appear to be linked to nation-states and political goals,” McAfee said. The worries can prompt threatened nations, like Israel, to prepare defensive and offensive cyber weapons. McAfee said that the private sector is at even greater risk.

INGL is the builder and operator of Israel’s gas transmission system.

“IGNL’s production networks are, naturally highly sensitive, given that they manage nationwide pipelines and other critical infrastructures related to natural gas transmission,” said Lior Frenkel, co-founder and CEO of Waterfall Security Solutions.

“In today’s risk and threat environment, it is no longer possible to allow connectivity to external networks or to the Internet using ordinary IT security products and technologies,” he added. “Existing software-based security does not provide adequate protection to enable remote viewing or remote assistance by suppliers or vendors. Modern cyber security risks and the overall reliability requirements have driven both the operators and owners of critical Infrastructures and the relevant regulators to an understanding that IT security does not provide adequate security resilience.”

Gil Kashani, chief information technology officer at INGL, said that for them the Waterfall Remote Screen View system solves both an operational and business problem.

“On the one hand, we do not allow the connection of our operational networks to the Internet,” Kashani said. “On the other hand, vendors and service providers are required to provide us with efficient and rapid service. Some of these vendors are located abroad and thus onsite support is not even an option. Using Waterfall RSV, we can now allow the riskless capability of viewing relevant screens and displays, by remotely located technicians, and support specialists.”

Frenkel says that Cyber terror is a growing concern, especially when dealing with critical Infrastructures. In recent years, Cyber-terror and cyber-vandalism are the new emerging threats of SCADA networks, and Critical National Infrastructures. These threats, powered by global terror and cyber-crime, are here to stay, thus SCADA users should adopt new mind-sets and implement modern methods, technology and solutions to mitigate and eliminate the potential damages, Frenkel said.

Waterfall has been used in power plants, nuclear power plants, pipelines, and refineries – many of which are located in North America.

View the article

Info Tech, May 14, 2010

Waterfall Security Solutions Ltd, the leading provider of Unidirectional Security Gateways for secure network connectivity for Process Control Networks, SCADA systems, remote monitoring and segregated network, announces the successful installation of its innovative “Waterfall for ICCP” solution at Canada’s Energie NB Power.

The Waterfall for ICCP (“Inter-Control Center Communications Protocol”), which provides secure and real-time transfer of ICCP traffic from the plant’s network out to external networks, was implemented in order to facilitate remote monitoring. This facility is to be used by remote locations, the company’s corporate network and also by vendors. To support NB Power’s high operational continuity level, the Waterfall gateways were installed using Waterfall’s inherent and unique High Availability configuration.

In today’s risk and threat environment, it is no longer possible to allow connectivity to external networks or to the Internet using ordinary IT security products and technologies. Existing “software based” security does not provide adequate protection. To be able to allow remote monitoring, by supplies or vendors, better cyber security and higher levels of confidence must be provided. Modern cyber security risks and the overall reliability requirements have driven both the operators and owners of Critical Infrastructures and the relevant regulators to an understanding that IT security does not provide adequate security levels.

“Many Hydro, fossil and other power plants encounter this issue – how to enable vendors to remotely monitor mission critical equipment, yet retain the cyber security level of their industrial networks and comply to NERC’s CIP regulations”, says Lior Frenkel, co-founder and CEO of Waterfall Security Solutions, “Our Unidirectional Security Gateways, supporting the widely used ICCP, enable our customers to protect their critical assets, while keeping business processes intact.”

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, NIST and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, Critical National Infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support for leading industrial applications, such as: OSIsoft PI(TM) Historian, GE Proficy(TM) iHistorian, the Siemens SIMATIC(TM) and the GE OSM(TM) remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

PR Newswire, June 3, 2010

Waterfall Security Solutions Ltd, the leading provider of Unidirectional Security Gateways for secure network connectivity for Process Control Networks, SCADA systems, remote monitoring and segregated network, and Israel Natural Gas Lines Ltd (INGL), builder and operator of Israel’s gas transmission system, announces the successful installation of Waterfall(TM) Remote Screen View(TM) (Waterfall RSV) at INGL’s operational site.

The system, which provides a secure and real-time remote view of computer screens and control room displays, was implemented to facilitate vendor remote assistance and service for systems and equipment used by INGL.

IGNL’s production networks are, naturally highly sensitive, given that they manage nationwide pipe-lines and other critical infrastructures related to natural gas transmission. In today’s risk and threat environment, it is no longer possible to allow connectivity to external networks or to the Internet using ordinary IT security products and technologies. Existing software based security does not provide adequate protection to enable remote viewing or remote assistance by supplies or vendors. Modern cyber security risks and the overall reliability requirements have driven both the operators and owners of Critical Infrastructures and the relevant regulators to an understanding that IT security does not provide adequate security resilience.

“The Waterfall Remote Screen View(TM) system solves both an operational and business problem. On the one hand, we do not allow the connection of our operational networks to the Internet, on the other hand, vendors and service provides are required to provide us with efficient and rapid service. Some of these vendors are located abroad and thus on-site support is not even an option. Using Waterfall RSV, we can now allow the riskless capability of viewing relevant screens and displays, by remotely located technicians, and support specialists”, says Gil Kashani, Chief Information Technology Officer at INGL, “now we can enjoy a faster and better service, without exposing our networks and infrastructure to cyber risks from external sources”.

Lior Frenkel, co-founder and CEO of Waterfall Security Solutions, “Utilities and Critical Infrastructures, share the same concern: They need to stream information, in high volume and in real-time, out of the industrial and production network. Yet, the risks of doing this are too high. Our technology, which solves this problem, is being deployed and implemented in many critical infrastructures and utilities”.

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, NIST and other regulations as well as cyber-security best practices.

Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI(TM) Historian, GE Proficy(TM) iHistorian, the Siemens SIMATIC(TM) and the GE OSM(TM) remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

Yahoo Finance, May 12, 2010

Waterfall’s Unidirectional Security Gateways were selected to be an integral part of DHS’s Control Systems Security Program new cyber security test-bed. This test-bed, located and operated by the Idaho National Labs (INL), is an environment where control and monitoring systems, including Supervisory Control and Data Acquisition (SCADA) systems, energy management systems, process control systems (PCS), distributed control systems, and third party security components are evaluated for cyber security vulnerabilities.

The Control Systems Security Program (CSSP) of the Department of Homeland Security (DHS) is tasked with the responsibility of reducing vulnerabilities in Industrial Control Systems that support and manage the United States critical infrastructures.

Control systems underlie a significant part of the nation’s critical infrastructure and are vulnerable to cyber and physical attacks by adversaries that could result in loss of life, severe economic impact, or both.

Waterfall’s technology, accompanied with its multitude of available Waterfall Connectors, provides out-of-the-box integration and support for the majority of industrial applications, historian systems, and SCADA protocols. “Waterfall’s technology is the natural selection for DHS’s test-bed environment. Waterfall bestows its unparalleled security to many of the applications and systems used today by the nation’s critical infrastructure. Our continuous R&D efforts ensure that future industrial and control systems and applications introduced to the market by the various vendors, will be supported by Waterfall as well, and this will be available for DHS’s test-bed continuous activities”, said Lior Frenkel, Co-Founder and CEO of Waterfall Security Solutions.

About Waterfall Security Solutions:

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security Gateways and data diodes for Control networks, SCADA systems, Remote Monitoring and Segregated Networks. Waterfall’s security solutions assist Utilities and Critical Infrastructures to easily and comfortably achieve compliance with NERC-CIP, NRC, NIST and other regulations as well as cyber-security best practices. Waterfall’s products have been deployed in many utilities, critical national infrastructures, mission critical environments and homeland security agencies throughout North America, Europe and Israel. Waterfall’s offerings include support to leading industrial applications, such as: OSIsoft PI™ Historian, GE Proficy™ iHistorian, the Siemens SIMATIC™ and the GE OSM™ remote monitoring platforms, and leading industrial protocols, such as: OPC, Modbus, DNP3 and ICCP.

View the article

Yahoo Finance, April 1, 2010

SCADA, or Supervisory Control and Data Acquisition, is used, among other things, to monitor and control the U.S. critical infrastructure assets and facilities; Waterfall receives a patent for unidirectional security gateways to be used in SCADA

Waterfall Security Solutions Ltd., a provider of unidirectional security gateways for SCADA systems, announced that on 19 January it has been granted U.S. patent No. 7,649,452 for its SCADA industrial network security technology.

SCADA, or Supervisory Control and Data Acquisition, is an industrial control system which is used for monitoring and controlling industrial process. It is used, among other things, to monitor and control the U.S. critical infrastructure assets and facilities. According to Waterfall Security Solutions, its products have been deployed in many critical U.S. infrastructures, homeland security agencies, and mission-critical environments in different continents.

TMCnet.com’s Jayashree Adkoli writes that the company’s unidirectional security gateways include integration with customer’s existing infrastructure, such as SCADA and industrial applications and protocols.

The patent, entitled “Protection of control networks using a one-way link,” strengthens the company’s intellectual property portfolio of technology and solutions for the critical infrastructure and utilities’ markets. “We are expanding our installed-base in North America and are providing more power plants, substations, pipelines, and other critical industrial networks, the ability to securely connect to external networks.” Lior Frenkel, cofounder and CEO of Waterfall Security Solutions, said. “This patent, combined with other filed patents and intellectual property, allows us to provide our customers with the ultimate security solution.”

The company’s One-Way SCADA protocol is utilized as a unidirectional gateway that facilitates extraction and export of messages, data, and information from within industrial networks to external networks. This allows reuse of HMI displays and reporting services, within external or public networks, without the risk to command and control, Waterfall said.

The company offers security solutions for many industrial applications such as the OSIsoft PI Historian, GE Proficy Historian, the Siemens (News-Alert) WinTS, and the GE OSM remote monitoring platforms.

The company says that its cybersecurity solutions allow utilities and critical infrastructures easily to attain compliance with regulations such as NERC-CIP, NRC, NIST, and more.

Waterfall counts among its customers power generation plants, oil and gas companies, T&D’s, refineries, and other utilities and industrial facilities.

View the article

Homeland Security Newswire, February 8, 2010