Ce diaporama a bien été signalé.
Nous utilisons votre profil LinkedIn et vos données d’activité pour vous proposer des publicités personnalisées et pertinentes. Vous pouvez changer vos préférences de publicités à tout moment.

Demystifying Industrial Security

The Industrial Internet is a massive game changer with its commercial value estimated at $33 trillion. Not only is it expected to give a strong boost in confidence to global GDP, increase performance even in customized production, and introduce a more sustainable manufacturing model, but it is also a remarkable accelerator of technological innovation. To be part of this evolution, OEMs need to implement guidelines that will reshape workflows and help them boost productivity. Security aspects are particularly relevant as they represent the keystone of the new connected infrastructure.

Over the recent years, Wibu-Systems has hardened CodeMeter®, its own protection, licensing, and security technology, to withstand ruggedized environments. Unlike the office world, many sectors of industry have special requirements, often characterized by substantial swings in temperature, humidity, and vibrations. This implies a complete redesign of the hardware secure elements where machine code is encrypted, login credentials stored, and licenses saved.

Among the many components that were carefully picked and subjected to extensive tests, the flash memory is one of the most critical ones. Our trusted solution partner Swissbit will cohost a webinar with us to shed light on the elements that should guide intelligent device manufacturers in their choice of reliable and fail-safe embedded memory.

During this event, you will be able to learn about:

- Security threats that undermine connected industry
- Pros and cons of industrial storage solutions
- Fundamentals of flash memory NAND technology
- Product highlights of Swissbit memory components
- Benefits of adding security to a memory component
- Available solutions for IP and integrity protection
- Use cases for combining storage and security
- Examples of an integration process workflow

Safeguard your knowledge with an all-round solution tailored to meet the needs of the most demanding market segments, including industrial, automation, automotive, networking and telecommunications, healthcare and life science, and defense.

Watch the webinar: https://youtu.be/rsx6XoMoLIM

  • Soyez le premier à commenter

  • Soyez le premier à aimer ceci

Demystifying Industrial Security

  1. 1. CodeMeter Security with integrated Industrial Flash Memory Oliver Winzenried CEO WIBU-SYSTEMS AG oliver.winzenried@wibu.com Demystifying Industrial Security October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 1
  2. 2. Connected World October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 2
  3. 3. Changes in IoT and Industrie 4.0, … October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  Stand-Alone Devices  Fixed Features  One-Time Business  Product, Upgrades, Service, Spare parts/consumables, replacement  Only Repair / Maintenance  Individual Hardware TomorrowToday  Connected Devices  Upgradable Features (App Store)  Recurring Revenues  Pay-Per-Use, Pre-Paid, Post-Paid  New Business Models  Shorter Time-to-Market, Cloud  Standard Platforms (HW & SW) 3
  4. 4. Challenges October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 4
  5. 5. Security versus Safety October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  Safety Protection of humans or environment against risks that come from a (known) technical system  IT Security Protection of a technical system against attacks (unknown) and disruption caused by environment or humans Human / Environment Technical System Technical System Human / Environment 5
  6. 6. Challenge: Security Threats Today October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  Manipulation & Tampering  Espionage: Industrial and NSA, Prism, Tempora, …  Cyber-Attacks: Stuxnet, Duqu, Flame, … (German TV, January 2015) 6
  7. 7. Challenge: Piracy Problem – Latest Studies October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  German Engineering Federation (VDMA) 2014:  7.9 Billion € piracy losses  9 of 10 companies affected  71% affected by piracy  51% affected by counterfeiting of complete machines  JMF-Study: Japan losses 1.8 times higher  BSA-Study: Losses 63 Billion US$, globally 42% 50% 66% 67% 68% 62% 67% 71% 2003 2006 2007 2008 2010 2012 2014 N=337 Is your company affected by product or brand piracy? Yes: 71% No: 29% 7
  8. 8. Opportunities October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" Protection against: IP Theft Hacking Tampering Licensing: License Models Business Models License Management License Deployment 8
  9. 9. Why CodeMeter with Flash Memory?  Security and memory in ONE Device  Retrofitting in Brownfield  Cost, Space, Power, … benefits  Highest Reliability & Quality  Excellent components and Partnerships: October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 9
  10. 10. Solutions Working Principles October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" Wibu-Systems Solutions & Process Products & Use Cases 10
  11. 11. Technical Solutions October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  Know-how Protection -> using data and program code encryption  IP in software, source code, algorithms  IP in embedded systems, PLCs, devices, IoT, data, documents, …  Software and Product Protection -> encryption & unclonable crypto keys  Counterfeiting reduction, prevention of unauthorized use (active and passive)  Flexible Licensing -> using encryption and business process integration  New business models simplify logistics and monetize software  Tamper Protection -> using digital signature  Prevention of manipulation – Cyber-Security – IoT, Industrie 4.0 11
  12. 12. Requirements in Industrial Applications  Highest Security for IP and tamper protection:  Users are not the attackers but organized crime, terrorism, competition  Use of secure elements for industrial interfaces and environments  Flexible Storage for multiple licenses  Multiple (device) options and features  Different stake holders and rights owners, i.e. automation or machine supplier, user  Communication Security: Cyber Security  Certificates for OPC UA  Retrofitting October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 12
  13. 13. Wibu-Systems Technologies and Solutions October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 13 Software Integration Back Office Integration Protection Suite: Ax/Ex/Ix-Protector CodeMeter License Central  CodeMeter®  Secure Key Storage (Hardware / Software)  De-/Encryption (AES, ECC, RSA)  Flexible License Models  Software Integration  Automatic Code Protection / API  Secure Boot / OPC UA  Back Office Integration  Key and certificate deployment  License deployment  License administration
  14. 14. Integrate Once – Deliver Many October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 14 Integration into processes Delivery to the userIntegration into software Software Software CodeMeter Protection Suite Integrate Once Deliver Many CodeMeter License Central LL L L ERP/CRM e-commerce CodeMeter License Central Software License Portal
  15. 15. CmDongle: Storage for Licenses and Keys with highest Security October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  CmCards and CmSticks using:  CC EAL 4+/5+ certified security controller  CC EAL 4+/5+ certified crypto libraries  Extended temperature option  Market proven CodeMeter firmware  Combination with flash memory  Hyperstone flash memory controller (S6/8, F4, A2)  Fixed BOM, PCN, long term availability  Swissbit Qualification and Production 15
  16. 16. CmDongle: Combination of CodeMeter Security and flash memory disk October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  CmCards and CmStick/M open up new use cases:  Mobile applications (service, forensic, tax, education, industrial, …)  Delivery media for large data (maps, service documents, databases, …)  Secure storage of log data  Use of CmStick/M with HID (no MSD, no BadUSB risk)  Secure Boot of embedded systems, PLCs, IoT applications  Retrofitting in brownfield  Customization: data duplication, key management, OEM label and package, … 16
  17. 17. CmDongle – Highest Security Level with integrated Smart Card Chip  CmStick/M Industrial and Commercial  CdRom, CmPublic, CmPrivate, CmSecure  Supports HID communication (CmSecure)  Encrypted storage, secure update (no BadUSB risk)  CmStick/MI 1011-0x-2xx -> Industrial  128 MB…8 GB SLC flash memory, -40°C…+85°C  CmStick/MC 1011-0x-4xx -> Commercial  8 GB…64 GB high-end 2-Bit-eMMC flash memory October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 17
  18. 18. Security with Industrial Flash compared with consumer products October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 18
  19. 19. Applications Banking & Retail October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 19 Medical & IoT Industrial Automation and CPS
  20. 20. Banking and Retail: Wincor-Nixdorf October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 20  Introduction 2009  CrypTA-User worldwide  Central administration and helpdesk using Global Customer Care Center  Fulfills requirements from PCI DSS  Increase of service efficiency through standardized processes
  21. 21. Mobile Forensic Software: Guidance Guidance  Mobile Applications  Secure Logging  Multi-partition October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 21
  22. 22. Medical (customed, Sirona, …)  Anti Counterfeiting  Licensing  Pay Per Use  Tamper Protection (FDA, MPG) October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 22
  23. 23. Gaming Features:  Secure Boot from CmCard/CF  IP Protection for game software  Tamper Protection for configuration October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 23
  24. 24. Industrial Automation October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security"  CODESYS  Boot Project Protection  CodeMeter API  Source Code Protection  Bernecker + Rainer  Technology Guard  Rockwell  Source Protection CSPP 24
  25. 25. 1989...2015: More than 25 years in Business October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 25  Founded in 1989  By Oliver Winzenried and Marcellus Buchheit  Headquarters in Germany (Karlsruhe)  Focus on Protection, Licensing and Security  Technological leader with international patents  ISO 9001:2008 certified WIBU-SYSTEMS worldwide  Subsidiaries in Seattle, USA – Shanghai and Beijing, China – Belgium – France – Ireland – Netherlands – Portugal – Spain – UK  Exclusive distribution partners in Japan – Korea – Russia and many more countries  Top 2 vendor in hardware-based protection  Top 3 vendor in software licensing  Global Awards WIBU-SYSTEMS AG
  26. 26. 1989...2015: Cooperations and Memberships  Developer Programs  R&D Projects  Organizations  Standardization 26October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 26
  27. 27. 1989...2015: Customers and Partners October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 27
  28. 28. Summary: CodeMeter & Flash Memory in One Device is…  …perfect for IoT-Devices, Cyber Physical Systems & Embedded Systems  …space, power and component saving for minimal Total Cost of Ownership  …reliable and long-term available  …fitting for the use in the brownfield  …optimal for tampering protection and IP protection of software and data  …ideal for the implementation of new business models October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 28
  29. 29. Deutschland: +49-721-931720 USA: +1-425-7756900 China: +86-21-55661790 http://www.wibu.com info@wibu.com Deutschland: +49-721-931720 USA: +1-425-7756900 China: +86-21-55661790 http://www.wibu.com info@wibu.com Thank you! Questions? Next Steps? Contact us October 7, 2015 Swissbit - Wibu-Systems Webinar "Demystifying Industrial Security" 29

×