Loading
Rockwell Automation Home
  • Industries
    • Industries Chevron RightChevron Right
      • Automotive & Tire
      • Cement
      • Chemical
      • Entertainment
      • Fibers & Textiles
      • Food & Beverage
      • Household & Personal Care
      • Infrastructure
      • Life Sciences
      • Marine
      • Metals
      • Mining
      • Oil & Gas
      • Power Generation
      • Print & Publishing
      • Pulp & Paper
      • Semiconductor
      • Water Wastewater
      • View All
    Industries
    Case StudyRockwell Automation's case studies Case Studies DistributorDistributor How to Buy EventEvent Events
  • Capabilities
    • Capabilities Chevron RightChevron Right
      • The Connected Enterprise®
      • Consulting & Integration Services
      • Cybersecurity
      • Digital Transformation
      • Industrial Analytics
      • Industrial Automation & Control
      • Industrial Maintenance & Support
      • Industrial Networks
      • Lifecycle Services
      • Machine & Equipment Builders
      • MES Solutions
      • Process Solutions
      • Safety Solutions
      • View All
    Capabilities
    Blogs DistributorDistributor How to Buy EventEvent Events
  • Products
    • Hardware Chevron RightChevron Right
    • Software Chevron RightChevron Right
      • Circuit & Load Protection
      • Condition Monitoring
      • Connection Devices
      • Distributed Control Systems
      • Drives & Motors
      • Energy Monitoring
      • Human Machine Interface
      • Independent Cart Technology
      • Industrial Computers & Monitors
      • Input/Output Modules
      • Industrial Control Products
      • Lighting Control
      • Motion Control
      • Motor Control
      • Networks Security & Infrastructure
      • Packaged Solutions
      • Power Supplies
      • Programmable Controllers
      • Push Buttons & Signaling Devices
      • Relays & Timers
      • Safety Instrumented Systems
      • Safety Products
      • Sensors & Switches
      • Signal Interface
      • View All Hardware Products
    • DesignSuite
      • Dynamic Digital Twin Software
      • Studio 5000 Design Software
    • OperationSuite
      • FactoryTalk Edge Gateway
      • FactoryTalk Batch
      • FactoryTalk Historian
      • FactoryTalk View - HMI Software
      • FactoryTalk Metrics
    • MaintenanceSuite
      • FactoryTalk Analytics for Devices
      • FactoryTalk AssetCentre
      • FactoryTalk Emonitor
      • FactoryTalk Network Manager
      • FactoryTalk TeamONE
      • Fiix CMMS
    • InnovationSuite
      • Augmented Reality
      • FactoryTalk Analytics
      • MES
      • ThingWorx IIoT Platform
    Products
    Find Products by Our Brands: Allen-Bradley FactoryTalk
  • Support
    • Product Support Chevron RightChevron Right
    • Documentation Chevron RightChevron Right
    • Knowledgebase Chevron RightChevron Right
    • Training Chevron RightChevron Right
    • Downloads
      • 2D & 3D Drawings
      • Activations
      • Add-on Profiles
      • Application Code Libraries
      • Compatibility & Downloads
      • Drivers & Firmware
      • Electronic Datasheets
      • EPLAN Macros
      • Sample Code Library
      • Software Patches
      • View All
    • Selection & Configuration
      • Control Systems Configuration Tools
      • Procurement Specifications
      • ProposalWorks Proposal Builder
      • Global Short-circuit Current Ratings Tool
      • Integrated Architecture Builder
      • View All
    • Compatibility & Migration
      • Migration & Modernization
      • Lifecycle Status
      • Product Replacement Lookup
      • View All
      • Technical Documentation Center
      • Technical Specifications
      • Product Certifications
      • Product Drawings
      • Release Notes
      • Literature Library
    • Support Center
      • Support Options
      • Search for Answers
      • Chat Online
      • Call Us
      • View All
    • Online Forum
      • My Inbox
      • My Favorites
      • My Subscriptions
      • View All
    • My TechConnect
      • Chat History
      • Service Ticket History
      • Manage Your Favorite Answers
      • Field Service Request
      • View All
      • E-Learning Courses
      • Instructor-led Courses
      • Training Workstations
      • View All
    Support
    Contact Us HelpHelp Get Support LaunchpadTools and applications View All Tools
  • Company
    • Events Chevron RightChevron Right
    • News Chevron RightChevron Right
    • Careers Chevron RightChevron Right
    • PartnerNetwork Chevron RightChevron Right
    • About Us Chevron RightChevron Right
    • Featured Events
      • Automation Fair
      • Process Solutions User Group
      • Rockwell Automation On The Move
      • Rockwell Automation TechEd
      • ROKLive
      • India Inc. on the Move
      • PACK EXPO CONNECTS
      • Virtual Summit Chemical
      • Virtual Summit Life Science
      • Virtual Summit Warehouse
      • View All
    • Webinars
      • Live
      • On-Demand
      • View All
      • Blogs
      • Case Studies
      • Automation Today
      • Podcasts
      • Press Releases
      • View All
      • View Jobs
      • Teams & People
      • Hackathon
      • Employee Video Spotlight
      • Authorized Distributors
      • Encompass Product Partners
      • Licensed Developers
      • OEM Partners
      • Strategic Alliance Partners
      • System Integrator Partners
      • PartnerNetwork Portal
      • View All
      • Our Brands
      • Our Community
      • Our History
      • Integrity & Sustainability
      • Investor Relations
      • View All
    Company
    ProductivityProductivity Investor Relations
  • Sales
  • Sales
  • View All Industries
  • View All
  • View All
  • View All
  • View All
  • Automotive & Tire
  • Cement
  • Chemical
  • Entertainment
  • Fibers & Textiles
  • Food & Beverage
  • Household & Personal Care
  • Infrastructure
  • Life Sciences
  • Marine
  • Metals
  • Mining
  • Oil & Gas
  • Power Generation
  • Print & Publishing
  • Pulp & Paper
  • Semiconductor
  • Water Wastewater
  • View All
  • The Connected Enterprise®
  • Consulting & Integration Services
  • Cybersecurity
  • Digital Transformation
  • Industrial Analytics
  • Industrial Automation & Control
  • Industrial Maintenance & Support
  • Industrial Networks
  • Lifecycle Services
  • Machine & Equipment Builders
  • MES Solutions
  • Process Solutions
  • Safety Solutions
  • View All
  • Circuit & Load Protection
  • Condition Monitoring
  • Connection Devices
  • Distributed Control Systems
  • Drives & Motors
  • Energy Monitoring
  • Human Machine Interface
  • Industrial Computers & Monitors
  • Input/Output Modules
  • Industrial Control Products
  • Lighting Control
  • Motion Control
  • Motor Control
  • Networks Security & Infrastructure
  • Packaged Solutions
  • Power Supplies
  • Programmable Controllers
  • Push Buttons & Signaling Devices
  • Relays & Timers
  • Safety Instrumented Systems
  • Safety Products
  • Sensors & Switches
  • Signal Interface
  • View All Hardware Products
  • View All
  • View All
  • Technical Documentation Center
  • Technical Specifications
  • Product Certifications
  • Product Drawings
  • Release Notes
  • Literature Library
  • View All
  • Instructor-led Courses
  • Training Workstations
  • View All
  • View All
  • Blogs
  • Case Studies
  • Automation Today
  • Podcasts
  • Press Releases
  • View All
  • View Jobs
  • View All
  • Authorized Distributors
  • Encompass Product Partners
  • Licensed Developers
  • OEM Partners
  • System Integrator Partners
  • PartnerNetwork Portal
  • View All
  • Our Brands
  • Our History
  • Investor Relations
  • View All
  • iTRAK Intelligent Track Systems
  • MagneMover Lite Intelligent Conveyor System
  • QuickStick Intelligent Conveyor System
  • View All
  • Dynamic Digital Twin Software
  • Studio 5000 Design Software
  • FactoryTalk Edge Gateway
  • FactoryTalk Batch
  • FactoryTalk Historian
  • FactoryTalk View - HMI Software
  • FactoryTalk Metrics
  • FactoryTalk Analytics for Devices
  • FactoryTalk AssetCentre
  • FactoryTalk Emonitor
  • FactoryTalk Network Manager
  • FactoryTalk TeamONE
  • Fiix CMMS
  • Augmented Reality
  • FactoryTalk Analytics
  • MES
  • ThingWorx IIoT Platform
  • 2D & 3D Drawings
  • Activations
  • Add-on Profiles
  • Application Code Libraries
  • Compatibility & Downloads
  • Drivers & Firmware
  • Electronic Datasheets
  • EPLAN Macros
  • Sample Code Library
  • Software Patches
  • View All
  • Control Systems Configuration Tools
  • Procurement Specifications
  • ProposalWorks Proposal Builder
  • Global Short-circuit Current Ratings Tool
  • Integrated Architecture Builder
  • View All
  • Migration & Modernization
  • Lifecycle Status
  • Product Replacement Lookup
  • View All
  • Support Options
  • Search for Answers
  • Chat Online
  • Call Us
  • View All
  • My Inbox
  • My Favorites
  • My Subscriptions
  • View All
  • Chat History
  • Service Ticket History
  • Manage Your Favorite Answers
  • Field Service Request
  • View All
  • My Training
  • View All
  • Automation Fair
  • Process Solutions User Group
  • Rockwell Automation On The Move
  • Rockwell Automation TechEd
  • ROKLive
  • India Inc. on the Move
  • PACK EXPO CONNECTS
  • Virtual Summit Chemical
  • Virtual Summit Life Science
  • Virtual Summit Warehouse
  • View All
  • Live
  • On-Demand
  • View All
  • Students & New Grads
  • View All
  • Hackathon Use Case for Manufacturing Optimization
  • Hackathon Use Case for Sustainability
  • Hackathon Use Case for Visual System Modernization
  • Hackathon Use Case for Dynamic Filtering
  • View All
  • 24toCode Event Recap - Winter 2019
  • 24toCode Event Recap // IT Internal Hackathon
  • Meet the 2019 IT Summer Interns
  • 24toCode Promo Video
  • Harbor View Plaza Ribbon Cutting
  • Check Your Blind Spots Mobile Tour at Rockwell Automation
  • Mechanic & Tool Apprenticeship at Rockwell Automation
  • Working at Rockwell Automation in Karlsruhe
  • Summer Internships at Rockwell Automation
  • The Intrapreneurial Skills Accelerator at Rockwell Automation
  • Makers Wanted
  • #LifeatROK w Katowicach
  • IT Summer Internship Program
  • #LifeatROK with Diogo
  • View All
  • Cisco
  • Endress+Hauser
  • FANUC
  • Microsoft
  • Panduit
  • View All
  • Our Focused Giving
  • STEM Education
  • Lifelong Learning
  • View All
  • Sustainability Report
  • Our Commitment to Diversity, Equity and Inclusion
  • Environmental, Health, & Safety
  • Ethics & Compliance
  • Global Supply Chain & Sourcing
  • Product Environmental Compliance
  • Quality Management Systems
  • Trust & Security
  • Workforce of Tomorrow
  • View All
Case StudyRockwell Automation's case studies Case Studies DistributorDistributor How to Buy EventEvent Events
Blogs DistributorDistributor How to Buy EventEvent Events
Find Products by Our Brands:
Allen-Bradley FactoryTalk
Contact Us HelpHelp Get Support LaunchpadTools and applications View All Tools
ProductivityProductivity Investor Relations
  • Literature LibraryLiterature Library
    Literature Library

    Access technical and commercial publications for hardware and software products, applications, services and solutions.

    PCDCProduct Compatibility and Download Center
    Compatibility & Downloads

    Find downloads including firmware, release notes, associated software, drivers, tools and utilities.

    KnowledgebaseKnowledgebase Support Center
    Knowledgebase

    Browse the database of questions and answers on a variety of products and technologies.

    Product ConfiguratorProduct Configurator
    Product Configurator

    Configure and select products rapidly.

    Software SubscriptionsSoftware Subscriptions
    Software Subscriptions

    One stop shopping for software and subscription services.

    2D & 3D Drawings Bill of Materials CrossWorks Electronic Datasheets Motion Analyzer My Equipment My Training E-Learning Portal Product Lifecycle Status Product Registration Product Selection Toolbox Repairs Sample Code Library Software Activations View All
    Tools
    UserUser Sign In/Create an Account
  • User Account User
Tools
Literature LibraryLiterature Library
Literature Library
PCDCProduct Compatibility and Download Center
Compatibility & Downloads
KnowledgebaseKnowledgebase Support Center
Knowledgebase
Product ConfiguratorProduct Configurator
Product Configurator
Software SubscriptionsSoftware Subscriptions
Software Subscriptions
2D & 3D Drawings Bill of Materials CrossWorks Electronic Datasheets Motion Analyzer My Equipment My Training E-Learning Portal Product Lifecycle Status Product Registration Product Selection Toolbox Repairs Sample Code Library Software Activations View All
Blog
Recent ActivityRecent Activity

The Unsung Heroes of Industrial Security: Researchers

Share This:

LinkedInLinkedIn
TwitterTwitter
FacebookFacebook
PrintPrint
EmailEmail

When a vulnerability exists in an industrial control system, it’s vital that the good guys discover it first.

That’s why we’re grateful for the work done by the largely unheralded heroes of cybersecurity – researchers.

These folks work diligently to uncover industrial security vulnerabilities. When they do so before the bad guys and alert companies like ours, so we can fix them, they help prevent what could be major security incidents.

At Rockwell Automation, we embrace researchers. We actively work with them as part of our standards-aligned vulnerability handling and coordinated disclosure process. And we make a point to give credit where credit is due by showing them our appreciation.

Testing the System

Outside researchers test industrial control products the same way an adversary does: they look for flaws in systems and communications protocols and try to work their way in.

If a researcher finds a vulnerability in our products, they can notify our Product Security Incident Response Team (PSIRT). We’ll then work with them to identify and resolve a validated vulnerability.

When we disclose the finding in a security advisory, we recognize the researcher who found it as a sign of our thanks. We also send the researcher a personal communication to reiterate our appreciation. It’s a simple token of thanks – but for us an important one. And often, the gratitude goes both ways.

For example, Jacob Baines, a principal research engineer with Tenable, Inc., recently worked with us on a security disclosure. He relayed the following:

"Rockwell Automation PSIRT is one of the most professional security groups I've disclosed vulnerabilities to. In my experience, Rockwell Automation responds quickly to disclosure-related emails, and they've always taken timelines very seriously, to help ensure the ecosystem is secure.

“Furthermore, whether it be the developer’s progress or planned publication dates, Rockwell Automation does a great job of sharing information. This is key to effective coordinated disclosure. They even share their advisory text in advance. In my mind, the Rockwell Automation PSIRT is a great example of how vendors should work with researchers on coordinated disclosures.”

Making Proactive Security a Priority

Getting ahead of threats is central to what we do in our industrial security work at Rockwell Automation. Working with outside researchers is one way we do that. We also have our own researchers who aggressively test our products to look for flaws. And we take other steps to be proactive.

For example, our Allen-Bradley ControlLogix 5580 controller is the world’s first controller to be certified compliant with IEC 62443-4-2, today’s most robust control system security standard. We also certified our Rockwell Automation Security Development Lifecycle (SDL) to the IEC 62443-4-1 standard.

For us, industrial security isn’t just about securing our products and services. It’s about helping the companies we work with protect their people, productivity and intellectual property.

You can learn more about our industrial security strategy, services and solutions here.

Published 16 September, 2019


Subscribe

Subscribe to Rockwell Automation and receive the latest news, thought leadership and information directly to your inbox.

Subscribe

Recommended For You

Loading
  • Technical Question
  • Chat Technical Support
  • Phone Support
  • Contact Sales
  • General Questions
  1. Chevron LeftChevron Left Home Chevron RightChevron Right
  2. Chevron LeftChevron Left Company Chevron RightChevron Right
  3. Chevron LeftChevron Left News Chevron RightChevron Right
  4. Chevron LeftChevron Left Blogs Chevron RightChevron Right
Discover
  • The Connected Enterprise®
  • Create Your Account
  • Case Studies
  • Events
Information for...
  • Distributors
  • OEM
  • System Integrators
  • Encompass Partners
  • Investors
  • Career Seekers
Contact Us
  • General Questions
  • Technical Questions
  • Local Sales & Service
  • Pricing & Availability
  • Report Ethical Concerns
  • Customer Experience Survey
Site Information
  • Legal
  • Privacy Policy
  • Cookie Preferences
  • Terms of Use
  • Trademarks
Change Country Site SelectionChange RockwellAutomation.com site selection to a different country, region or language Change Country
India/English

Keep Updated With Us

Sign up to receive our latest headlines for free.

Stay Informed Now
Follow Us
BlogRockwell Automation's Blog
Copyright ©2021 Rockwell Automation, Inc.
Home