Where Smart Data meets Data Security Siemens Cloud for Industry powered by SAP HANA. April 2015

Transcription

1 Where Smart Data meets Data Security Siemens Cloud for Industry powered by SAP HANA April 2015

2 Think of a Number! Page 2

3 Prologue: Nineteenth-century Data Overkill Page 3

4 Prologue: Your Brain Story Page 4

5 Big Data in Industry What does it mean?

6 We are at the start of the next Industrial Revolution From Industry 1.0 to Industry 4.0 First Industrial Revolution Second Industrial Revolution Third Industrial Revolution Fourth Industrial Revolution Degree of complexity based on the introduction of mechanical production equipment driven by water and steam power based on mass production achieved by division of labor concept and the use of electrical energy based on the use of electronics and IT to further automate production based on the use of cyber-physical systems Data Driven Services Repair shops Standardization / Process knowledge Software Updates First mechanical loom, 1784 First conveyor belt, Cincinnati slaughterhouse, 1870 First programmable logic controller (PLC) Modicon 084, Time Page 6

7 Our vision is a market place for industrial service applications based on connectivity to devices A Collection of customers data... Source: Plant Cloud Services Team Page 7 7 Confidential Siemens AG All rights reserved

8 Provide Visualisation in Dashboards Out of the box analytics Source: Plant Cloud Services Team Page 8 8 Confidential Siemens AG All rights reserved

9 Drive Train Analytics Page 9

10 Industry Evolution: The future of big data and cloud applications will be in the industrial space 2020 it will be 2015 it will be Zettabyte 7.4 Zettabyte Big data / cloud applications From machine to machine the focus today and in the future Machine2Machine Sensors, meters, devices, industrial machines Internet of Things/"Industry 4.0" Enabling additional productivity levers and new business models From person to person that was the beginning People2People Network of virtual communities Zettabyte The total volume of data generated on earth summed up to People2Machine Medical technology, digital TV, cameras, computers, mobile phones Page 10 1 Zettabyte = 1 sextillion bytes = 1000 Exabytes = 1 Billion Terabytes Source: Oracle, 2012, Roland Berger 2015

11 Siemens and SAP collaborate to create a Cloud for Industry Siemens and SAP are uniquely positioned to connect the world of distributed assets to the world of data analytics and business A joint cloud for industry (platform as a service) would be the basis for value added service applications by SAP, Siemens and others Siemens and SAP decided to collaborate for Cloud for Industry : Positive feedback from surveying 50 customers Implemented two technological pilots G2M started with first pilot customers Page 11

12 Siemens builds an open cloud-platform for industry customers Cloud for Industry Apps OEM Apps End Customer Apps App. Develop. Apps Simatic Sinumerik Sinamics Scalance PC S7 Third-partyproducts Optimization of plants and assets as well as energy and resources Open standard (OPC) for connectivity to Siemens and third-party products Plug-and-play connectivity of Siemens products (engineering via TIA portal) Cloud for Industry with open application interface for individual customer applications Selectable cloud infrastructure Public cloud, Private cloud or on premise Hybrid cloud Transparent pay-per-use pricing models Enablement of new business models (e.g. selling machining hours instead of assets) Page 12

13 Example Plant Cloud Services Pump Management and Optimization Page 13

14 Cloud for Industry would enable data value services based on a global platform and easy device connectivity Applications & Services Eco System Fleet Service Management Predictive Maintenance Energy Analytics & Optimization Plant Analytics & Optimization Customer Specific Apps device management vibration monitoring & analytics consumption modeling data & event correlation helpdesk & ticketing model-based failure prediction energy reporting tuning advisory SAP / Siemens Cloud for Industry device management data management analytics / rules visualization system management onboarding data acquisition rule engine cockpit/dashboard device modeling status monitoring pre/post processing analytics engine reporting agent configuration remote access big data store events / notifications mobile UI s access authorization Device Connectivity / Agent Technology smart agent embedded agent lightweight agent open agent protocol extensibility / SDK Page 14

15 A cloud structure... Types of Cloud Open Cloud Enterprise or Private Cloud Hybrid Cloud Models: IaaS Infrastructure as a Service The bases of Cloud models provides networking, storage etc PaaS Platform as a Service - Combines Iaas with a set of services for software and Application development DaaS Data as Service Lets you connect and use the Cloud for data storage SaaS Software as a Service Multitennancy for business applications accessed by multiple users Page 15

16 Our customers start to innovate on data services - case studies The Challenges Protect intellectual property Accelerate development pipelines and contribute Some to the References environment 1) Navigate volatile markets and intensified competitive pace Our Answers Cement Minerals Glass Chemical Pharma Antea Cement (ALB) Asset Analytics EU Manufacturer of asphalt Energy Analytics Saint Gobain (IN) Ind. Network Analytics Pilkington (UK) Energy Analytics Int. Oil & Gas company Security Services Int. Pharma company Energy Analytics No unplanned system downtimes 147% RoI 100% detection of hidden network problems Over 1 million energy cost savings 0 % incidents within 18 months 12% energy cost savings *) For details please refer to the back-up slides Page 16

17 Extract new value from your existing data Siemens Plant Data Services From Data Visualization & recommendations Master asset uptime to Value Data analytics and simulation Optimize energy performance Cloud-based analytics ecosystem Secure storage and data transfer Enhance industrial cyber-security Data collection Maximize Process Efficiency Page 17

18 Do I Need Security? Develop A Strategy

19 Threat Vectors Sneaker- Net WiFi BYOD Insider Social Engineering Physical Page 19

20 Industrial Security Impact on relevant vulnerabilities affecting automation products Page 20

21 Selected IT Security Standards, Guidelines and Committees IEC TC 57 WG15 DHS Roadmap to Secure Control Systems in the Energy Sector ChemSec Roadmap SAC TC 124 NERC-CIP BSI Grundschutz NIST WIB M-2784 ISO/IEC 2700x ISO/IEC IEC US-CERT Control Systems Security Center Siemens Focus Standards VDI/VDE IEC / ISA DKE Guidelines Committees Associations Governmental bodies Page 21

22 IACS, automation solution, control system Industrial Automation and Control System (IACS) Asset Owner System Integrator operates designs and deploys Operational and Maintenance policies and procedures + Automation solution IACS environment / project specific is the base for Product Supplier develops Embedded devices Control System as a combination of Network components Host devices Applications Independent of IACS environment Page 22

23 IEC / ISA covers all aspects of industrial security IEC / ISA General Policies and procedures System Component Terminology Concepts Models Compliance metrics Security levels (SL) Organization Training / awareness Policies, procedures Information, documentation management Risk management and implementation Incident planning and response Continuity plan Solution design and maintenance Personnel security Physical security Network segmentation Account administration Authentication Authorization System architecture, network segmentation Zones and conduits SL for systems Identification and authentication control Use control System integrity Data confidentiality Restricted data flow Timely response to events Resource availability Product development process PLCs HMI devices PC stations Firewalls Gateways Switches Functions Applications Data Defense in Depth involves all stakeholders: Asset owner, system integrator, component supplier Page 23

24 Security Levels for automation solution and control system Plant environment IEC SL 1 Protection against casual or coincidental violation Risk assessment SL 2 Protection against intentional violation using simple means with low resources, generic skills and low motivation System architecture zones, conduits Target SLs Achieved SLs 3-2 Security risk assessment and system design SL 3 Protection against intentional violation using sophisticated means with moderate resources, IACS specific skills and moderate motivation Automation solution SL 4 Protection against intentional violation using sophisticated means with extended resources, IACS specific skills and high motivation Capabilty SLs Control System capabilities Independent of plant environment 3-3 System security requirements and Security levels 1. Part 3-2: asset owner / system integrator define zones and conduits with target SLs 2. Part 3-3: product supplier provides system features according to capability SLs 3. Capability SLs are deployed to match target SLs Page 24

25 Industrial Security The Siemens Solution Industrial Security Services Managed service and consulting Security Management Processes and policies Products & Systems Secure PCs, controllers and networks The Siemens solution reduces your risk with a well thought-out security concept. Page 25

26 Thank You Paul Hingley Siemens Data Services Siemens AG Alle Rechte vorbehalten. Answers for industry.