The main components of the complete solution are the SCADA and automation software 'PcVue' running under Windows and the hermetically sealed operating system 'KasperskyOS' from Kaspersky Lab. Everything is pre-installed and bundled on an Advantech server or PC. The PcVue software runs on a virtualized Windows instance, encased in the protected KasperskyOS environment. "KasperskyOS is the data guardian that analyzes and monitors every data packet transmitted from 'PcVue' to the field level and back from the field level 'on the fly'," explains Frank Ringsdorf, Head of Marketing at PcVue, at the presentation of the solution at SPS IPC Drives. The system is marketed under the trade name 'PcVue Secure'.

The motivation behind the solution was the wide range of risks for a SCADA system: Infected USB sticks, insecure wireless solutions, infected laptops and PLC logic, insecure Internet connections or insecure remote support. Dangers that can have a correspondingly large impact: for example, changes to process control systems, operating parameters, measured values or setpoints, as well as possible stop commands.

With 'PcVue Secure', not only KasperskyOS is used for protection. To make the automation solution cyber-secure, a combination of conventional security technologies is used, which is brought together under the name KICS (Kaspersky Industrial CyberSecurity). These include malware protection, whitelisting and vulnerability management as well as device access control, which can be used to manage connections to removable storage media or peripheral devices.

"The actual heart of 'PcVue Secure' is the 'PcVue' software in the current version 12," explained Frank Ringsdorf. In addition to the visualization, a sophisticated monitoring and alarm system is also available. The connection to the PLC and the field level is made via a variety of communication protocols, most of which are implemented natively. In addition to the standard industry protocols, other IoT protocols such as OPC UA and MQTT are also available. In addition to the common BMS protocols - such as BACnet, Dali, KNX, SNMP or LonWorks - the system also has drivers.

Into the IoT with LoRa

PcVue also presented a new complete IoT solution consisting of LoRaWAN sensors and the 'PcVue' automation software. The aim: wireless monitoring of industrial processes. In addition to sensor types for technical building measurements, such as room temperature, humidity or room occupancy, sensors with standard inputs for voltage and current measurements (mV, 0/4...20 mA) and digital I/Os are available. The radius of the LoRaWAN wireless network, which can be operated free of charge, is several kilometers and can also penetrate concrete structures due to its design.