Planning and engineering method, software tool and simulation tool for an automation solution

Patent metadata

Field	Value
Publication number	US-10521550-B2
Application number	US-201615083525-A
Country	US
Kind code	B2
Filing date	Mar 29, 2016
Priority date	Apr 8, 2015
Publication date	Dec 31, 2019
Grant date	Dec 31, 2019

Abstract

In planning and engineering an automation solution which comprises an automation system and a process engineering plant, objects that represent the components of the configured automation solution are imported by means of a simulation tool to simulate the automation solution on the basis of simulation models associated with the imported objects. Attributes contained in objects which represent the hardware components of the automation system and which describe IT security events that may be generated by the components are entered into the associated simulation models for simulatively generating security events in a simulation of the automation solution, for transferring the simulatively generated security events to a Security Information Event Management (SIEM) system for evaluation, and for using the results of the evaluation generated by the SIEM system to simulate the automation solution.

First claim

What is claimed is:

1. A planning and engineering method for an automation solution which comprises an automation system and a process engineering plant wherein, when designing and configuring the automation solution, objects that are created and linked by an engineering tool and which represent operable and observable components of the plant and hardware components of the automation system are imported by a simulation tool and the automation solution is simulated using simulation models that are associated with the imported objects, the method comprising the steps of:
transferring into the simulation models attributes contained in the objects which represent the hardware components, wherein the attributes describe security events that can be generated by the hardware components of the automation system;
simulatively generating by the simulation models the security events associated with the imported objects of the hardware components of the automation system;
transferring for evaluation the simulatively generated security events to a Security Information Event Management (SIEM) system;
utilizing, by the simulation tool, results of the evaluation generated by the STEM system to simulate the automation solution to verify whether the security events associated with the hardware components of the automation system would actually be reported when the automation system or process engineering plant is operating;
optimizing the automation solution by changing the objects that are created and linked by the engineering tool and which represent operable and observable components of the plant and hardware components of the automation system based on the results of the evaluation generated by the SIEM system; and
operating and controlling the automation system or process engineering plant based on the optimized automation solution.

2. The planning and engineering method of claim 1 , further comprising configuring, by the engineering tool, correlation rules for the evaluation of the security events and transferring the configured correlation rules into the STEM system.

3. The planning and engineering method of claim 1 , further comprising configuring, by means of the engineering tool, actions in response to the results of the evaluation of security events and transferring the actions into the STEM system, and using, by the simulation tool, ones of the actions selected by the STEM system as a function of the results in the evaluation of simulated security events to simulate the automation solution.

4. A non-transitory computer readable medium comprising executable instruction for a planning and engineering software tool for an automation solution which comprises an automation system and a process engineering plant, the medium comprising instructions for an engineering tool configured to design and configure the automation solution by generating and linking objects that represent operable and observable components of the plant and hardware components of the automation system, and a simulation tool configured to import the objects and to simulate the automation solution using simulation models associated with the imported objects, the medium further comprising instructions for:
configuring the engineering software tool to assign attributes to the objects that represent the hardware components, wherein the attributes describe security events that can be generated by the hardware components of the automation system; and
configuring the simulation tool to transfer the attributes into the simulation models when the objects are imported, to simulatively generate the security events, to transfer for evaluation the simulatively generated security events to a Security Information Event Management (SIEM) system and to use results of the evaluation that are generated by the STEM system to simulate the automation solution to verify whether the security events associated with the hardware components of the automation system would actually be reported when the automation system or process engineering plant is operating;
optimizing the automation solution by changing the objects that are created and linked by the engineering tool and which represent operable and observable components of the plant and hardware components of the automation system based on the results of the evaluation generated by the STEM system; and
operating and controlling the automation system or process engineering plant based on the optimized automation solution.

5. The planning and engineering software tool of claim 4 , wherein the engineering tool is operable to configure correlation rules for the evaluation of the security events and to transfer the configured correlation rules to the SIEM system.

6. The planning and engineering software tool of claim 4 , wherein the engineering tool is operable to configure actions in response to the results of the evaluation of security events and to transfer the configured actions to the SIEM system, and wherein the simulation tool is configured to use ones of the actions that are selected by the SIEM system as a function of the results in the evaluation of simulated security events to simulate the automation solution.

7. A planning and engineering system for an automation solution containing the planning and engineering software tool of claim 4 .

8. An automation system for a process engineering plant having the planning and engineering system of claim 7 .

9. A computing system comprising:
one or more processors;
a memory storing a program of instructions for a simulation tool for an automation solution which comprises an automation system and a process engineering plant, the simulation tool being configured for, when designing and configuring the automation solution, importing objects that are created and linked by an engineering tool and which represent operable and observable components of the plant and hardware components of the automation system and simulating the automation solution based on simulation models that are associated with the imported objects, wherein the simulation tool is further configured for:
transferring into the simulation models attributes contained in the objects which represent the hardware components, wherein the attributes describe security events that can be generated by the hardware components of the automation system; and
simulatively generating the security events, transferring the simulatively generated security events to a Security Information Event Management (STEM) system for evaluation, and using the results of the evaluation generated by the SIEM system to simulate the automation solution to verify whether the security events associated with the hardware components of the automation system would actually be reported when the automation system or process engineering plant is operating;
optimizing the automation solution by changing the objects that are created and linked by the engineering tool and which represent operable and observable components of the plant and hardware components of the automation system based on the results of the evaluation generated by the STEM system; and
operating and controlling the automation system or process engineering plant based on the optimized automation solution.

Assignees

• Siemens Ag

Inventors

• Drumm Oliver
• Lutz Benjamin
• Palmin Anna
• Wolf Gerrit

Classifications

• H04L63/1433

  Vulnerability analysis · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G05B19/4188 Primary

  characterised by CIM planning or realisation · CPC title

• G05B2219/32339

  Object oriented modeling, design, analysis, implementation, simulation language · CPC title

• G06F30/20

  Design optimisation, verification or simulation (optimisation, verification or simulation of circuit designs G06F30/30) · CPC title