The Tofino Enforcer modules developed with the SDK protect two protocols that are generally difficult to protect: those of SCADA (supervisory control and data acquisition) and ICS (industrial control systems), and improve the overall reliability and security of industrial systems.
Belden's Tofino Enforcer SDK offers proven and efficient DPI technology to automation providers and systems integrators with experience and expertise in software development. With this toolkit, developers can design Loadable Security Modules (LSMs) for the wide variety of SCADA and ICS protocols currently in use.
• For large automation system providers, the Tofino Enforcer SDK allows them to secure their proprietary protocols with DPI technology without revealing sensitive internal information. Companies can create a customized solution, controlling their own development cycle and managing future updates.
• To enhance value for their customers, system integrators can create custom DPI modules designed to protect specialized SCADA devices or protocols. Instead of starting from scratch, they can leverage Tofino's proven DPI firewall technology for any situation or application.
Tofino Enforcer technology offers superior security compared to conventional firewall solutions by performing multi-level analysis and filtering all SCADA messages. Unlike intrusion detection and prevention (IPS/IDS) technologies, Tofino Enforcer technology provides very fast message transmission for time-critical applications such as power generation and distribution.
The combination of deep content inspection with ultra-fast packet processing allows owners of control and SCADA systems to regulate network traffic to a level of detail previously unattainable. For example, with the Enforcer module for a specific SCADA protocol, engineers can block any attempt to write to a PLC or SCADA device while still allowing fast access to data values across the entire network. The result is improved network reliability, availability, and security for any SCADA, process control, or security system.
The Tofino Enforcer SDK provides a pre-configured toolkit with documentation that guides third-party developers through the process of quickly building the necessary security functionality. All phases of the development process are managed internally, and Belden's Tofino Security team provides support and final testing.
Key features and benefits of the Tofino Enforcer SDK:
• A virtual machine development platform with pre-configured firewalls and logging for layers 3 and 4.
• The ability to use Tofino Enforcer's proprietary DPI technology, which enables detailed inspection of SCADA protocols necessary for protecting industrial systems.
• Sample source code—illustrating a Tofino Enforcer module for a well-known protocol.
• Easy creation of additional loadable security modules.
• User-friendly debugging tools.
