General Electric Company

Manas Ranjan Sahoo

Justin Brandon Chong

David Richard Socky

William Robert Pettigrew

A system includes a security server including a memory and a processor configured to receive a first set of communications from a human machine interface (HMI) device, wherein the first set of communications relates to HMI device security events. The security server is also configured to receive a second set of communications from an industrial controller, wherein the second set of communications relates to industrial controller security events. The security server is further configured to package and send the received first and second sets of communications to a remote managed security service provider (MSSP) for analysis.

System and method for logging security events for an industrial control system

A system includes a build system processor configured to generate a private encryption key and configured to add the private encryption key to at least one of a plurality of source files. Each of the plurality of source files includes instructions configured to be executed by an industrial controller processor. The processor is also configured to generate a plurality of binary files from the plurality of source files. The processor is further configured to construct a whitelist file including first hash key values determined for the plurality of binary files and configured to encrypt the whitelist file using the private key to provide an encrypted whitelist file.

Systems and methods for controlling file execution for industrial control systems

A system includes a controller configured to control a process, and store at least one binary file, wherein the at least one binary files is generated from at least one source file, wherein the at least one source file comprises instructions configured to be executed by a processor in the controller. The controller may also be configured to retrieve a whitelist file comprising a first hash key value derived from the at least one binary file, and execute an executable file based on the whitelist file, wherein the executable file comprises the source file.

A system includes a control system having a plurality of controllers configured to control a process. Each controller of the plurality of controllers further includes a secure repository configured to store a login credential. The control system is configured to authorize a user action by comparing a user credential against the login credential of each of the plurality of controllers.

Growing community of inventors

Hyderabad Telangana, India

Manas Ranjan Sahoo