Abstract: A method for analyzing SCADA projects includes generating a configuration for the SCADA system deployed in a default environment, receiving a first result of a set of tests run on the SCADA system using the configuration in the default environment, determining whether the first result of the set of tests is successful, deploying the SCADA system using the configuration in a customer environment, comparing the default environment with the customer environment, determining differences between the default environment and the customer environment, receiving a result of another set of tests run based on the differences between the default environment and the customer environment, adjusting the configuration in the customer environment based on the result of the another set of tests to generate an adjusted configuration, and receiving a second result of the set of tests run on the SCADA system using the adjusted configuration in the customer environment.

Abstract: Verification systems are provided for verification of proper execution of control commands on remote devices. In some embodiments, the verification systems can include video cameras, audio sensors, thermal detectors, etc., to provide secondary sources of information by which to verify primary reports on a state of a remote device. Each device can be associated with a device profile defining operating characteristics of the remote device in various states. In some examples, device properties can also be defined based on a current state of the device and a received control command. In some examples, the device profiles are models of expected device properties that can used to verify proper execution of control commands. In some embodiments, detection of state mismatch can trigger a variety of actions by the system to mediate the mismatched state according to a variety of control rules.

Abstract: According to one aspect, a SCADA system is provided. The SCADA system includes a network interface configured to communicate data with a plurality of industrial control devices via an industrial control system (ICS) network. The SCADA system further includes a memory storing SCADA configuration information including ICS network configuration information and device information descriptive of each industrial control device of the plurality of industrial control devices and at least one processor in data communication with the memory and the network interface. The SCADA system also includes an intrusion detection component executable by the at least one processor and configured to read the SCADA configuration information, generate, from the SCADA configuration information, authorized communication information descriptive of one or more expected communication types of communications authorized for transmission via the ICS network.

Abstract: According to one aspect, a SCADA system is provided. The SCADA system includes a network interface configured to communicate data with a plurality of industrial control devices via an industrial control system (ICS) network. The SCADA system further includes a memory storing SCADA configuration information including ICS network configuration information and device information descriptive of each industrial control device of the plurality of industrial control devices and at least one processor in data communication with the memory and the network interface. The SCADA system also includes an intrusion detection component executable by the at least one processor and configured to read the SCADA configuration information, generate, from the SCADA configuration information, authorized communication information descriptive of one or more expected communication types of communications authorized for transmission via the ICS network.

Abstract: Verification systems are provided for verification of proper execution of control commands on remote devices. In some embodiments, the verification systems can include video cameras, audio sensors, thermal detectors, etc., to provide secondary sources of information by which to verify primary reports on a state of a remote device. Each device can be associated with a device profile defining operating characteristics of the remote device in various states. In some examples, device properties can also be defined based on a current state of the device and a received control command. In some examples, the device profiles are models of expected device properties that can used to verify proper execution of control commands. In some embodiments, detection of state mismatch can trigger a variety of actions by the system to mediate the mismatched state according to a variety of control rules.

Abstract: A method for analyzing SCADA projects includes generating a configuration for the SCADA system deployed in a default environment, receiving a first result of a set of tests run on the SCADA system SCADA system using the configuration in the default environment, determining whether the first result of the set of tests is successful, deploying the SCADA system using the configuration in a customer environment, comparing the default environment with the customer environment, determining differences between the default environment and the customer environment, receiving a result of another set of tests run based on the differences between the default environment and the customer environment, adjusting the configuration in the customer environment based on the result of the another set of tests to generate an adjusted configuration, and receiving a second result of the set of tests nm on the SCADA system using the adjusted configuration in the customer environment.

Abstract: A method of acquiring data and performing calculations on the data using a provider service. A provider ticket service (PTS) receives tickets from one or more clients. Each ticket includes a calculation identifier and a payload. The calculation identifier identifies a calculation to be performed using information in the payload. The PTS associates a unique ticket identifier with each ticket. A ticket manager submits a selected ticket from the PTS to a provider host service (PHS), which determines which provider is to perform the calculation identified by the selected ticket by inspecting provider identification information in the selected ticket. The PHS launches a provider host thread (PHT) that invokes the provider determined to perform the calculation identified by the calculation identifier of the selected ticket. The provider performs the calculation and returns its result to the PHS, which passes the result back to the PTS, which returns the result to the requesting client.

Abstract: A system and methods for using data from an external database compiled from real device used for testing and simulation of a system. The system includes an external database interface to access an external database. The external database includes a plurality of categories of time-value data collected from an electrical device. An importer converts one of plurality of categories of time-value data to a corresponding topic of a common data format. A device profiler is coupled to the importer to create a device profile including the converted topic. A database profiler creates a database profile representing a system including a device defined by the device profile and including the category of time-value data.

Abstract: A system and methods for using data from an external database compiled from real device used for testing and simulation of a system. The system includes an external database interface to access an external database. The external database includes a plurality of categories of time-value data collected from an electrical device. An importer converts one of plurality of categories of time-value data to a corresponding topic of a common data format. A device profiler is coupled to the importer to create a device profile including the converted topic. A database profiler creates a database profile representing a system including a device defined by the device profile and including the category of time-value data.

Abstract: A method of acquiring data and performing calculations on the data using a provider service. A provider ticket service (PTS) receives tickets from one or more clients. Each ticket includes a calculation identifier and a payload. The calculation identifier identifies a calculation to be performed using information in the payload. The PTS associates a unique ticket identifier with each ticket. A ticket manager submits a selected ticket from the PTS to a provider host service (PHS), which determines which provider is to perform the calculation identified by the selected ticket by inspecting provider identification information in the selected ticket. The PHS launches a provider host thread (PHT) that invokes the provider determined to perform the calculation identified by the calculation identifier of the selected ticket. The provider performs the calculation and returns its result to the PHS, which passes the result back to the PTS, which returns the result to the requesting client.