Abstract: The present disclosure generally relates to methods and system used to collect waste fluids. A system controller is disclosed to control the operation of at least a portion of the system. The controller has a CPU. The fabrication facility includes a first processing system having fluid dispensed therein for processing a material on a part. A first drain is configured to collect the processing fluid as waste fluid after processing the part. The fabrication facility also includes a waste collection system fluidly coupled to the system drain. The waste collection system has two or more valves configured to couple the system drain and two or more facility drains. Each facility drain is uniquely coupled to one of the two or more valves. The CPU is configured to operate the valves between an open and a closed state in response to the fluid entering the system drain.

Abstract: Embodiments include methods, network security computer systems, and computer program products for identifying deviant engineering modifications to programmable logic controllers. Aspects include: collecting, by a network traffic collection device of the network security computer, network traffic data from one or more engineering stations, and storing, by a network traffic data storage device, the network traffic data collected. Each of the engineering stations may include one or more programmable logic controllers. The method also may include: comparing, by a network traffic comparison module, the network traffic data collected, detecting, by an abnormality detection module, any deviant engineering modifications to the programmable logic controllers in the engineering stations; and generating, by an alarming and correction module, one or more reports for the deviant engineering modifications to programmable logic controllers.

Abstract: A computer-implemented method for assessing and managing network security for a network includes retrieving topology data and network traffic data with a processor, where the topology data is indicative of a topology of the network. The method may further include retrieving, via the processor, network flow data from a plurality of network data collectors, generating, via the processor, an attack tree based on the topology data and the network flow data, updating a customer model database with the attack tree and the topology data, and outputting a security assessment based on the attack tree and the topology data.

Abstract: Embodiments include methods, network security computer systems, and computer program products for identifying deviant engineering modifications to programmable logic controllers. Aspects include: collecting, by a network traffic collection device of the network security computer, network traffic data from one or more engineering stations, and storing, by a network traffic data storage device, the network traffic data collected. Each of the engineering stations may include one or more programmable logic controllers. The method also may include: comparing, by a network traffic comparison module, the network traffic data collected, detecting, by an abnormality detection module, any deviant engineering modifications to the programmable logic controllers in the engineering stations; and generating, by an alarming and correction module, one or more reports for the deviant engineering modifications to programmable logic controllers.

Abstract: A computer-implemented method for assessing and managing network security for a network includes retrieving topology data and network traffic data with a processor, where the topology data is indicative of a topology of the network. The method may further include retrieving, via the processor, network flow data from a plurality of network data collectors, generating, via the processor, an attack tree based on the topology data and the network flow data, updating a customer model database with the attack tree and the topology data, and outputting a security assessment based on the attack tree and the topology data.

Abstract: Security for network communications is internally generated by an industrial control system (ICS). The ICS is assembled in a known-good environment prior to connecting to another network. While in the known-good environment, one or more components of the ICS auto-negotiate (40) with other components, assigning (42) security tokens. These certificates are used to internally secure communications between the components prior to any connection to other devices and without relying on external provisioning of the security tokens during commissioning (30) of the ICS.

Abstract: Security for network communications is internally generated by an industrial control system (ICS). The ICS is assembled in a known-good environment prior to connecting to another network. While in the known-good environment, one or more components of the ICS auto-negotiate (40) with other components, assigning (42) security tokens. These certificates are used to internally secure communications between the components prior to any connection to other devices and without relying on external provisioning of the security tokens during commissioning (30) of the ICS.

Abstract: A method of determining the critical vapor pressure of a hygroscopic material, such as a drug. A drug sample is placed in a substantially isothermal environment. A vapor, such as water vapor, at a given pressure is then placed in the ambient air over the drug. The rate of heat production from this sample at the given water vapor pressure, or the humidity of the air above the sample, is then measured. The water vapor pressure over the drug is gradually increased. Simultaneously, the rate of increase in heat production from the drug sample, or the rate of change of the relative humidity of the air above the drug sample, is measured. A marked increase in the rate of heat production generated by the drug, or a marked change in the relative humidity of the air over the sample, signals the attainment of the critical water vapor pressure.