Industrial Automation Security | Achilles Certification Program

As business and technology continue to drive towards more open and connected networks, mission critical systems – including those used in the control of power generation, oil production, water treatment, and transportation - are becoming increasingly vulnerable to cyber attacks that penetrate or bypass perimeter defenses.

With no existing standard for verifying the security of industrial control systems, Wurldtech took the leadership position and collaborated with industry to create a certification designed specifically to provide a meaningful security benchmark. The certification process presents device manufacturers with an independently verified result from which to communicate their product security to customers, while providing the operators of control systems the most complete, accurate, and trustworthy information possible on the security of their deployed products.

Download PDF

The Achilles certification program leverages the Achilles Security Analysis Platform to combine the world’s most sophisticated control system testing technology with a formal certification criteria based on internationally accepted standards and processes from which meaningful reliance can be placed on the results.

Achilles Certified products are secure ‘out of the box’ resulting in reduced costs and time commitment in product selection and deployment.
Third-party validation of product security leads to improved process reliability and safety.

Achilles Certification provides a single compliance framework resulting in faster time to market and lower development and integration costs.
The Achilles Certification mark provides a compelling endorsement of product quality.

Achilles™ Level 1 Certification verifies the security, reliability, and robustness of a device's implementation of OSI layers 2 – 4 including Ethernet, ARP, IP, ICMP, TCP and UDP. A device must pass each of the over 30 million individual tests to achieve Achilles™ Level I Certification.

A second level of Achilles™ Certification is planned for 2008. Level 2 Certification will include all of the test cases in Level 1 and add test cases for protocols in OSI layers 5 – 7. This will include the protocols commonly used to manage devices such as http, ftp and Telnet.

Vendors	Product
	Plantguard Controller \| AC 800M Controller
	Stardom FCJ Controller \| ProSafe-RS Vnet/IP Safety Control Unit \| CENTUM CS 3000 R3 Field Control Unit \| CENTUM CS 3000 R3 Vnet Router
	DeltaV Controller
	Trusted Controller
	Tricon Controller

Domain-Driven Methodology
Built upon an extensive set of best practices, experience-based techniques and fundamental principles that are unique to the industrial control systems industry.

Superior Testing Technology
Leverages Achilles testing technology, the most advanced testing tool available to identify known and unknown vulnerabilities in control systems

Operationally Defined Acceptance Criteria
Sophisticated conformance criteria designed to validate the functionality of control system I/O routines and not simply communication responses.

Formal Certification Regimen
Achilles Certification follows internationally accepted standards guiding documentation of procedures, performance measurements and records, which can be audited internally and externally.

Aligned with Emerging Industry Standards
Integrates industry-defined standards and practices of ISA-99 and the ISA Automation Compliance Security Institute to facilitate international regulatory compliance.

Automation vs IT Approach
Wurldtech tests in a simulated “real world” environment exercising and monitoring the DUT’s ability to maintain numerous key functionalities continuously, throughout the test process.

Reliable & Trustworthy Brand
The Achilles Certified seal symbolizes that a product’s quality, reliability and resilience has been assessed and validated by the global industry leader in industrial control systems security.

Independent Verification
A trained professional from Wurldtech Labs performs the testing in a controlled environment to validate conformance and preserve the integrity of results.

Industry Wide Acceptance
Globally-recognized standard boasting the largest portfolio of certified devices and formally recognized in procurement requirements by some of the world’s largest industrial organizations.

The Achilles testing and certification provides welcome reassurance to the industrial automation community that the products they purchase are highly secure and reliable, conforming to a comprehensive set of requirements, in order to achieve this globally recognized certification.