Rhebo Industrial Protector Substation Cybersecurity

and Availability

SOLUTION BRIEFIndustrial Network Continuity

Your Advantageswith Rhebo Industrial Protector

COMPREHENSIVE CYBER- SECURITY from control room to substation and power plant RAPID PROTECTION AGAINST CYBERATTACKS through early detection of reconnaissance and compromising activities

DATA PROTECTION AND SECURITY with engineering »Made in Germany«

COST-EFFICIENT INSTALLATION through software retrofit on network components and edge devices

PREVENTIVE MAINTENANCE through identification of technical error states SECURE ENERGY SUPPLY through protection againstmanipulation attempts

PROTECT AGAINST CYBERATTACKSAND MALWARE

SECUREREMOTE ACCESS

POINTS

ESTABLISH 360°INTRUSION DETECTION

SYSTEM

INDUSTRIALCUSTOMERS

PROSUMERMICROGRID

COMMERCIAL CUSTOMERSEND CUSTOMERS

WIND FARM

MUNICIPALPOWERPLANT

MUNICIPALSUBSTATION

HYDROELECTRICPOWER PLANT

CONVENTIONALPOWER PLANT

SUBSTATION SUBSTATION

DISTRIBUTIONSYSTEM OPERATOR

ENERGYSTORAGESYSTEM

TRANSMISSIONSYSTEMOPERATOR

TRANSMISSIONSYSTEMOPERATOR

PROTECTED BYRHEBO

New Challenges For Complex Energy Supply Systems

Early Detection Of Attacks On All Levels

The power grid is becoming increasingly fragmented due to the inte-The power grid is becoming increasingly fragmented due to the inte-gration of municipal utilities, renewable energy resources and the gration of municipal utilities, renewable energy resources and the construction of new substations. The individual stations are often construction of new substations. The individual stations are often located far away from the central control room. Therefore, control is located far away from the central control room. Therefore, control is increasingly carried out digitally via remote access. To secure these increasingly carried out digitally via remote access. To secure these peripheral systems, distribution and transmission system operators peripheral systems, distribution and transmission system operators often rely exclusively on firewalls. These reliably detect known mal-often rely exclusively on firewalls. These reliably detect known mal-ware. However, they are blind to novel attack patterns and professi-ware. However, they are blind to novel attack patterns and professi-onal attacks that often run for months or years. With several hund-onal attacks that often run for months or years. With several hund-red of thousands of new malware variants each dayred of thousands of new malware variants each day11 cybersecurity cybersecurity

The industrial communication monitoring with anomaly detection The industrial communication monitoring with anomaly detection from Rhebo Industrial Protector enables end-to-end monitoring of from Rhebo Industrial Protector enables end-to-end monitoring of the distributed infrastructure. Monitoring is performed at the indivi-the distributed infrastructure. Monitoring is performed at the indivi-dual sites via cost-efficient software sensors that are integrated on dual sites via cost-efficient software sensors that are integrated on existing edge devices such as switches or security gateways. Alter-existing edge devices such as switches or security gateways. Alter-natively, the sensor is installed as hardware. Rhebo monitors the natively, the sensor is installed as hardware. Rhebo monitors the communication within the substation‘s industrial control system as communication within the substation‘s industrial control system as well as all incoming and outgoing communication for anomalies di-well as all incoming and outgoing communication for anomalies di-rectly on-site.rectly on-site.

relying on identifying known signatures only becomes highly unrelia-relying on identifying known signatures only becomes highly unrelia-ble. Safeguards are minimal. On-site personnel are rarely trained and ble. Safeguards are minimal. On-site personnel are rarely trained and authorized to look after the industrial control system. Communicati-authorized to look after the industrial control system. Communicati-on within the plants is opaque to central monitoring in the control on within the plants is opaque to central monitoring in the control room. Incorrect or corrupted communications in substations and room. Incorrect or corrupted communications in substations and other remotely controlled power systems are not detected until they other remotely controlled power systems are not detected until they have already impacted the power supply. This makes it easy for cy-have already impacted the power supply. This makes it easy for cy-bercriminals to either cause direct damage or to scout the infrastruc-bercriminals to either cause direct damage or to scout the infrastruc-ture as part of the reconnaissance.ture as part of the reconnaissance.

1 1 Federal Office For IT Security (BSI)Federal Office For IT Security (BSI)

Communication changes in substations are detected in real-time. Communication changes in substations are detected in real-time. These include cyberattacks, manipulation attempts and technical These include cyberattacks, manipulation attempts and technical error states. All incidents are assessed for criticality, documented error states. All incidents are assessed for criticality, documented and transmitted to the control room. Damage to substations and and transmitted to the control room. Damage to substations and power plants can thus be effectively prevented, and the attack can power plants can thus be effectively prevented, and the attack can be stopped from spreading to other sites or the control room. With be stopped from spreading to other sites or the control room. With Rhebo Industrial Protector, distribution and transmission system Rhebo Industrial Protector, distribution and transmission system operators can implement a seamless intrusion detection system on operators can implement a seamless intrusion detection system on all sites in a cost-efficient and holistic manner.all sites in a cost-efficient and holistic manner.

IoT Device Protection »Made in Germany«

SOLUTION BRIEF RHEBO INDUSTRIAL PROTECTOR SUBSTATION 04-2021© Rhebo GmbH | Alle Angaben ohne Gewähr. Änderungen vorbehalten.

Rhebo GmbH Spinnereistr. 7 | 04179 Leipzig | DeutschlandRhebo.com

Contact uswww.rhebo.com | sales@rhebo.com | +49 341 3937900

Learn about our solutions for Industrial Network Continuity

• Rhebo Industry 4.0 Stability and Security Audit • Rhebo Industrial Protector • Rhebo Managed Protection

Rhebo develops and markets innovative industrial monitoring solutions and services for energy suppliers, industrial companies and critical infrastructures. The company enables its customers to guarantee both cybersecurity and the availability of their OT and IoT infrastructures and thus master the complex challenges of securing industrial networks and smart infrastructures. Since 2021 Rhebo has been a 100% subsidiary of Landis+Gyr AG,

a leading global provider of integrated energy management solutions for the energy industry with around 5,500 employees worldwide. Rhebo is a partner of the Alliance for Cyber Security of the Federal Office for Information Security and is actively involved in Teletrust – IT Security Association Germany and Bitkom Working Group on Security Management for the development of security standards. www.rhebo.com

About Rhebo