<<

Control System Security Center Overview of Control System Security Center

hp://www.css-center.or.jp/en/index.html

2014.7.6-7 Hideaki Kobayashi Control System Security Center (CSSC) Vice President R&D Director CL Laboratory Director

1 Control System Security Center Control System Security Center (CSSC) Outline

Mission ◇To ensure ICS security of Japanese Critical Infrastructure ◇Evaluation and certification for ICS product exporters in

■Outline http://www.css-center.or.jp/ Control System Security Total 24 corporations (As of June, 2014) *8 starting member corporations Center • Azbil Corporation * (Abbreviation) CSSC • Co., Ltd. Name ※ • LIMITED A corporation authorized by • , Ltd.* the Minister of Economics, Trade Association • Information-technology Promotion Agency, and Industry members Japan (IPA) (In • Japan Quality Assurance Organization(JQA) • LAC Co., Ltd. Established March 6, 2012 (The registration date) alphabetical • McAfee Co.,Ltd. order) • Corporation Tohoku Tagajo Headquarters • Corporation (TTHQ) • Mitsubishi Heavy Industries Ltd.* Red: • Mitsubishi Research Institute Inc.* Location Tagajo City, Miyagi, Japan • Mori Building Co., Ltd.* Research Center (TRC) ICS vendor • National Institute of Advanced Industrial Atago, Minato-ku, Tokyo, Japan Blue: Science and Technology (AIST) * Operator • NEC Corporation President : Seiichi Shin • NRI Secure Technologies Ltd. President Professor, The University of Green: • NTT Corporation & Vice Electro-Communications Research & • OMRON Corporation VP : Hideaki Kobayashi • The University of Electro-Communications, President Academy • Tohoku Information Systems Company, CSSC Incorporated • Corporation* Staff & 19 persons (as of 30 June, 2014) • InfoTechnology Center Co., Ltd. exclude part time staff & researcher • Trend Micro Incorporated Researcher • Corporation*

2 Control System Security Center 9simulated plants in CSS-Base6 CSSC uses TestBed “CSS-Base6” at Tagajo as R&D, evaluaon, cybersecurity exercise, human resource development and awareness. sewerage and drainage Gas automation Process automation systems

9simulated plants in Chemical Process CSS- Base6 Automation systems These plants simulate processes that are actually used in real settings.

Factory Automation 1 & 2

Building Automation1 & 2

Electrical substation Thermal Electrical generating plant Having so many guests since the opening (May 2013) unl today (June. 2014). Guests: over 1700 people except opening ceremony to which approx. 150 people came Demos: 380 mes Including to the guests from the Overseas Organizaons

3 Control System Security Center

METI and CSSC promote ISA/IEC62443 as ICS security standard and ISCI: ISA Security Compliance Institute also ISA/ISCI ISASecure as ICS security cerficaon standard. http://www.isasecure.org/Home.aspx CSSC Cerficaon laboratory has launched Target of general- purpose ISASecue EDSA cerficaon service since this April. Standardization control system IS A S e c u re TM IE C 6 2 4 4 3 Scheme owner:ISCI -2-1 Started from 2014.4.1 O rg a n iza tio n CSMS C USA In te rn a tio n a l ANSI/ACLASS Japan Accreditation Recognition Board IS C I IE C Accreditation SSA Accreditation System 62443 C USA CSSC exida Certification Laboratory com ponent IS C I EDSA

C Certification in Japan Vendors in Japan international industry by Japanese legend standard standard C :existing certification scheme EDSA : Embedded Device Security Assurance 4 Control System Security Center Internaonal Cooperaon Improvements in ICS security will ensure and accelerate the robustness and resilience of global crical infrastructures from both physical and cyber perspecves.

INL ENCS METI ICS-CERT CCI CSSC ISA ISCI

INL: Idaho National Laboratory ICS-CERT: Industrial Control Systems Cyber Emergency Response Team ISA: International Society of Automation ISCI: ISA Security Compliance Institute ENCS: European Network for Cyber Security CCI: Industrial Cybersecurity Center METI: Ministry of Economy, Trade and Industry CSSC: Control System Security Center

5