my scada

88
SCADA By : JEORAM FLORES BSEE

Upload: jayson-cartagena-jueco

Post on 02-Jan-2016

67 views

Category:

Documents


1 download

DESCRIPTION

SCADA

TRANSCRIPT

Page 1: my SCADA

SCADA

By : JEORAM FLORESBSEE

Page 2: my SCADA

Contents

Introduction of SCADAHow SCADA System Works?Components of SCADA SystemSystem Concept of SCADASCADA ArchitecturesProtocolsSecurity and Vulnerability of SCADA

System

Page 3: my SCADA

WHAT IS SCADA

SCADA stands for Supervisory Control And Data Acquisition.

SCADA refers to a system that collects data from various sensors at a factory, plant or in other remote locations and then sends this data to a central computer which then manages and controls the data.

Page 4: my SCADA

generally refers to an industrial control system(ICS).

It is a production automation and control system based on PCs.

Page 5: my SCADA

What is the purpose of SCADA

The primary purpose of SCADA is:

to monitor to control Alarming functions Data presentation Data acquisition

Page 6: my SCADA

History of SCADA System

Early 1900’s with advent of telemetry.Early 1960’s as an electronic system (I/O)

between MTU and RTU station.Early 1970’s DCS were developed.Late 1990’s Good SCADA system yet

flexible enough to adapt tomorrow’s changes.

Page 7: my SCADA

History of SCADA System

SCADA (supervisory control and data acquisition) has been around as long as there have been control systems.

The first ‘SCADA’ systems utilized data acquisition by means of panels of meters, lights and strip chart recorders.

Page 8: my SCADA
Page 9: my SCADA

Figure 2.1Sensors to panel using 4–20 mA or voltage

Page 10: my SCADA

As needs grew to monitor and control more devices in the plant, the PLCs were distributed and the systems became more intelligent and smaller in size.. Although initially RTU was often a dedicated device, PLCs are often used as RTUs these days.

Page 11: my SCADA

As the requirement for smaller and smarter systems grew, sensors were designed with the intelligence of PLCs and DCSs. These devices are known as IEDs (intelligent electronic devices). The IEDs are connected on a fieldbus such as Profibus, DeviceNet or Foundation Fieldbus to the PC.

Page 12: my SCADA

SCADA

Supervisory Control and Data Acquisition.SCADA system are used to monitor and

control remote or local industrial equipment facilities.

Combination of telemetry and data acquisition.

Page 13: my SCADA

WHAT IS DATA ACQUISITION

Data acquisition refers to the method

used to access and control information or data from the equipment being controlled and monitored. The data accessed are then forwarded onto a telemetry system ready for transfer to the different sites.

Page 14: my SCADA

SCADA is not just a hardware, neither a software. It’s a concept, it’s a system as a combination of special hardware, software and protocols.

Page 15: my SCADA

SCADA encompasses the collecting of the information, transferring it back to the central site, carrying out any necessary analysis and control and then displaying that information on a number of operator screens or displays. The required control actions are then conveyed back to the process

Page 16: my SCADA

Where is SCADA Used?

Typically, SCADA systems are used to automate complex industrial processes where human control is impractical systems where there are more control factors, and more fast-moving control factors, than human beings can comfortably manage.

Page 17: my SCADA

Application in Industries:Electric power generation, transmission and

distributionWater Management SystemsBuildings, facilities and environmentsManufacturing SystemsMass Transit Systems, Environmental Control Systems

Page 18: my SCADA

How SCADA System Works ?

A SCADA System performs four functions:1. Data acquisition2. Networked data communication3. Data presentation4. Control

Page 19: my SCADA

SCADA Components:

1. Sensors and Control Relays

2. Remote Telemetry Units (RTUs)

3. SCADA Master Units4. Communication Network

Page 20: my SCADA

Sensors and Control Relays

. Sensors (either digital or analog) and control relays that directly interface with the managed system.

Page 21: my SCADA

Remote Telemetry Unit (RTU)These are small computerized units

deployed in the field at specific sites and locations.

RTUs serve as local collection points for gathering reports from sensors and delivering commands to control relays.

Page 22: my SCADA

Scada Master UnitsThese are larger computer consoles that

serve as the central processor for the SCADA system.

Master units provide a human interface to the system and automatically regulate the managed system in response to sensor inputs.

Page 23: my SCADA

Communication Network

The communications network that connects the SCADA master unit to the RTUs in the field.

Page 24: my SCADA

System Concepts of SCADA

Page 25: my SCADA

System Concept of SCADA

SCADA

is a kind of software application program used for the process control and gather real time from remote locations for exercising this control on equipment and conditions.

Page 26: my SCADA

Scada SystemThe RTUs and PLCs are responsible for

data collection such as meter readings, equipment status etc. and communicate back to the SCADA system. This data can be stored in a database for later analysis or monitored by a supervisor to take appropriate actions if required.

Page 27: my SCADA

COMPOSITION

Input/output signal hardware

System Concept of SCADA

Page 28: my SCADA

Network

System Concept of SCADA

Page 29: my SCADA

System Concept of SCADA

Human Machine Interface (HMI)

SCADA

Page 30: my SCADA

System Concept of SCADA

Controllers

Page 31: my SCADA

System Concept of SCADA

Database (A structured set of data held in a computer, esp. one that is accessible in various ways)

Page 32: my SCADA

System Concept of SCADA

Communication and software

The SCADA consist of Hardware and Software components.

The hardware collects and feed data into a computer with SCADA software installed.

The data is then processed by the computer before presenting it in a timely manner.

Page 33: my SCADA

SCADA SYSTEM

Signal hardware (I/O)

controllers

networksUser interface (HMI)

CommunicationsEquipment and software

Page 34: my SCADA

System Concept of SCADA

CONTROL/ MONITOR FUNCTION

A system or the complete site is usually spread over a long geographical distance, SCADA is the central system for control and monitor of such a site or system.

Page 35: my SCADA

System Concept of SCADA

A Programmable Logic Controller (PLC) or Remote Terminal Unit automatically performs the main site control process.

The host control functions in most cases are limited to the capability of supervisory level or site override.

Page 36: my SCADA

System Concept of SCADA

SCADA SUBSYSTEM

HMI-is the apparatus which presents the process data to a human operator, and through this, the human operator monitors and control the process.

a supervisory(computer) system, gathering (acquiring) data on the process and sending commands(control) to the process.

Page 37: my SCADA

System Concept of SCADA

RTU-connecting to sensors on the process, converting sensor signals and sending digital data to the supervisory systems.

PLC-used as field devices because they are more economical, versatile, flexible, and configurable than special purpose RTU.

Communication infrastructure connecting the supervisory system to the RTU.

Page 38: my SCADA

System Concept of SCADA

Page 39: my SCADA

System Concept of SCADA

Page 40: my SCADA

System Concept of SCADA Data Acquisition begins at the RTU or PLC

level and includes meter readings and equipment status reports that are communicated to SCADA as required.

Data is then compiled and formatted in such a way that a control room operator using the HMI can make supervisory decisions to adjust or override normal RTU (PLC) controls.

Page 41: my SCADA

Remote Terminal Unit (RTU)

Page 42: my SCADA

What is RTU?

Remote Terminal Unit

Page 43: my SCADA

What is RTU?

An RTU monitors the field digital and analog parameters and transmits data to the Central Monitoring Station. It contains setup software to connect data input streams to data output streams, define communication protocols, and troubleshoot installation problems.

Page 44: my SCADA

RTUAn RTU(sometimes referred to as a remote

telemetry unit) as the title implies, is a standalone data acquisition and control unit, generally microprocessor based, which monitors and controls equipment at some remote location from the central station.

Page 45: my SCADA

RTUs differ from programmable logic controllers (PLCs) in that RTUs are more suitable for wide geographical telemetry.

RTUs, PLCs and DCS are increasingly beginning to overlap in responsibilities, and many vendors sell RTUs with PLC-like features and vice versa.

Comparison with other control systems

Page 46: my SCADA

Remote monitoring and control of functions and instrumentation for:

Hydro-graphic (water supply, reservoirs, sewerage systems).

Electrical power transmission networks and associated equipment.

Natural gas networks and associated equipment.

Outdoor warning sirens.

Applications of RTU

Page 47: my SCADA

47

PLC PLC – Programmable Logic Controller

Ladder logic Industrial computer that replaced relaysCannot control IEDs Communication compatibilities Takes actions based on its inputs

Page 48: my SCADA
Page 49: my SCADA
Page 50: my SCADA
Page 51: my SCADA
Page 52: my SCADA

Components of SCADA System

Page 53: my SCADA

Components of SCADA System

Page 54: my SCADA

Features of SCADADynamic process graphicReal-time and Historical trendingAlarmsRecipe ManagementSecurityDevice connectivityScript for logic developmentDatabase connectivityNetworking

Page 55: my SCADA

1. Dynamic Process Graphics

The graphics can include reactors, valves, pumps, agitators, conveyors as well as other equipment and machinery used in the plant.

Typically the SCADA software will have many ready to use symbols for proper representation which can be used in any type of industry.

Page 56: my SCADA

2. Real-time & Historical Trends

Real-time data will plot the real-time value for fixed period of time while historical data will have historical data stored value which can be viewed on demand.

The trend play very important role in the process operation. If your batch fails or the plant trips, you can simply go to the historical trend data and do the analysis.

Page 57: my SCADA

3. Alarms

Alarms represent warnings of process conditions that could cause problems, and require an operator response

have a very critical role in automation. Generally we have alarm states for each inputs/outputs. . Most of the SCADA software support four types of alarms like LOLO,LO,HI and HIHI.

Page 58: my SCADA

4. Recipe Management

When you have different products to manufacture, you just have to load the recipe of the particular product.

The recipe can be stored in a single server and it can be fetched by any client server from any area to run the process

Page 59: my SCADA

5. Security Every SCADA software has various levels

of security for securing the application by avoiding unauthorized access

Depending upon the access level given the operator/engineers is allowed to do the task. In most of the cases, operators are allowed only to operate the plant while maintenance engineers can do the application modifications

Page 60: my SCADA

6. Device Connectivity Every control hardware has its own

communication protocol for communicating with different hardware/software. Some of the leading communication protocol include Modbus, Profibus, Ethernet, Dh+, DH485, Devicenet, Controlnet.

The SCADA software needs device driver software for communication with PLC or other control hardware.

Page 61: my SCADA

7. Database ConnectivityIn many plants, it is important to

download the real-time information to the MIS. In this case the database connectivity is must.

Many SCADA software don’t have their own database. Hence for storage and reporting they use third party database like MS Access or SQL

Page 62: my SCADA

8. ScriptsScript is a way of writing logic in SCADA software.

Every SCADA software has its own instructions and way of writing program.

Using scripts, one can develop complex applications. You can create your own functions to suit the process requirement and execution.

Page 63: my SCADA

9. NetworkingIn many applications, we have to use

more than one SCADA software/operator stations. This can be achieved by taking the SCADA node on network.

In many cases Ethernet TCP/IP is commonly used for networking.

Page 64: my SCADA

SCADA Architectures

Three generation of SCADA systems:

First generation – MonolithicSecond generation – DistributedThird generation – Networked

Page 65: my SCADA

Monolithic

Thus SCADA systems were independent systems with no connectivity to other systems. Wide Area Networks were later designed by RTU vendors to communicate with the RTU.

The first-generation SCADA system was redundant since a back-up mainframe system was connected at the bus level and was used in the event of failure of the primary mainframe system.

Page 66: my SCADA

Monolithic SCADA System

First Generation SCADA Architecture

Page 67: my SCADA

Distributed

The processing was distributed across multiple stations which were connected through a LAN and they shared information in real time.

Each station was responsible for a particular task thus making the size and cost of each station less than the one used in First Generation.

Page 68: my SCADA

Distributed SCADA System

Second Generation SCADA Architecture

Page 69: my SCADA

Networked

Due to the usage of standard protocols and the fact that many networked SCADA systems are accessible from the Internet, the systems are potentially vulnerable to remote attack.

Page 70: my SCADA

Networked SCADA System

Third Generation SCADA Architecture

Page 71: my SCADA

Leading SCADA SoftwareWonderware : InTouch Intellution : iFix (Earlier Fix DMACS) Allen Bradley : RS View (Earlier Control

View) Siemens : WinCC (Earlier Coros LS /B ) GE Fanuc : Cimplicity Indusoft : I W S Movicon : Progea

Page 72: my SCADA

SCADA Protocols

The transmission of information (both directions) between the master station and RTUs using time division multiplexing techniques requires the use of serial digital messages.

These messages must be efficient.

Page 73: my SCADA

Protocols:

MODBUS DNP 3.0 Fieldbus Controller Area Network (CAN) Profibus DirectNet TCP/IP EthernetIEC 60870 -5

Page 74: my SCADA

SCADA VENDORSConitel, Profibus, Modbus RTU and RP-570.

Standard protocols are IEC 61850, DNP3 and IEC 60870-5-101 or 104. These protocols are recognized and standardized by all big SCADA vendors. Several of these protocols have extensions for operating through the TCP/IP.

Page 75: my SCADA

Security & Vulnerability of SCADA System

Threats to SCADA Systems:1. Foreign Intelligence Services2. Insiders3. Spammers(hackers)4. Spyware/malware authors(viruses)

Page 76: my SCADA

Security & Vulnerability

Page 77: my SCADA

Security & Vulnerability

Page 78: my SCADA

Security & Vulnerability

Page 79: my SCADA

Security & VulnerabilityDeploying SCADA Security Strategies:Boarder router and firewallProxy serverOperating systemApplicationPolicies and ProceduresScada firewall

Page 80: my SCADA

Boarder Router and FirewallsProperly configured and coordinated, can

protect passwords, IP addresses, files and more.

Hardened operating system

Page 81: my SCADA

Proxy ServersIs an internet server that acts as a

firewall, mediating traffic between a protected network and the internet.

Page 82: my SCADA

ApplicationsApplication layer attacks; i.e., buffer

overruns, worms, trojan horse program and malicious Active-X5 code, can incapacitate anti-virus software and bypass the firewall as if it wasn’t even there.

Page 83: my SCADA

Operating SystemsCore of every computer system.Design level migration to new and

improved operating system.

Page 84: my SCADA

Policies and ProceduresConstitute the foundation of security

policy infrastructures.Passwords Help protect the SCADA network in

conjunction with the corporate network

Page 85: my SCADA

Scada firewall

Strong firewall protection to wall off your SCADA networking systems from both internal corporate network and the internet be implemented.

Page 86: my SCADA

Security & Vulnerability

Page 87: my SCADA

Documented IncidentsNortheast Power Blackout

In August 2003, failure of the alarm processor in First Energy’s SCADA system prevented control room operators from having adequate situational awareness of critical operational changes to the electrical grid.

Page 88: my SCADA

Thanks for Listening