Honeywell announces new cybersecurity solution at HUG Symposium

Day two of the Honeywell Users Group (HUG) Asia-Pacific Symposium saw Honeywell announce a fully certified application control and whitelisting solution to help combat viruses and malware from attacking its Experion Process Knowledge System (PKS) control system platform.

Honeywell says whitelisting is an important tool in its evolving cybersecurity arsenal that protects from unwanted intrusions by permitting only applications and executable files that are considered safe on an ‘approved list’ to run, while blocking everything else.

While whitelisting has been used in the IT industry for many years, it has only recently been introduced to automation control systems. Honeywell says two of its major control systems clients have been extensively piloting the solution, conducting rigorous testing in specialised, mission-critical environments. The companies are providing feedback on their findings to Honeywell.

“Experion PKS users want increased cybersecurity as well as to spend less time managing the control system,” said Mike Baldi, Chief Cybersecurity Architect for Honeywell Process Solutions. “Application control and whitelisting is another tool to help them balance the need for security with available resources.

“Integrated business and production systems require careful design and infrastructure to ensure selective access and security. Honeywell is committed to helping customers strengthen their cybersecurity by providing best-in-class technology in a manageable, scalable fashion,” Baldi added.

“Application control and whitelisting is a good safeguard against some zero day intrusions - where defenders have no prior awareness of a vulnerability, and can enable better change management and protection against unauthorised alterations to the system configuration.”

The solution was developed through a partnership between Honeywell Process Solutions and its technology partner, Bit9.

Honeywell says application control and whitelisting is available to its clients and is an additional layer of protection for industrial systems and networks. The company recommends that these solutions should be part of an overall security program.

WNIPT’s editor Glenn Johnson is reporting from the HUG Symposium.