The SANS GISCP
Industrial Control System (ICS) - answerA device or set of devices that managed
commands directs or regulates the behaviour or other devices or system, bridges cyber
to physical, a device that can influence the real world
Relays - answerAn electrically operated switch. Complicated to configure cumbersome
and expensive
Pneumatics - answerThe technique of using gases for power transmission.
Control Loops - answercalculating and controlling an environment or process based on
feedback.
Proportional Integral Derivative (PID) - answera control loop feedback mechanism
(controller) widely used in industrial control systems. Calculates an error value as the
difference between a measured process variable and a desired setpoint.
Proportional - answerThe PID value that produces an output value that is proportional to
the current error value. The proportional response can be adjusted by multiplying the
error by a constant Kp, called the proportional gain constant.
Integral - answerThe PID value that is proportional to both the magnitude of the error
and the duration of the error. In a PID controller, it is the sum of the instantaneous error
over time and gives the accumulated offset that should have been corrected previously.
The accumulated error is then multiplied by the integral gain (K_i) and added to the
controller output.
Derivative - answerThis PID value in the process error is calculated by determining the
slope of the error over time and multiplying this rate of change by the derivative gain Kd.
The magnitude of the contribution of the derivative term to the overall control action is
termed the gain.
Fuzzy Logic - answerThe degrees of truth, Truth Value between 0 and 1 for various
factors. Values used to determine final operation
Devices - answerActuate things in order to process Stuff
Distributed Control System (DCS) - answerRefers to a control system of a process plant
and industrial process wherein control elements are not only located in central location
(like the brain) but are also distributed throughout the system with each component sub-
,system controlled by one or more controllers so the intelligence is distributed across the
sections of the plant. Follows hierarchy in its control philosophy with various function
spread across . Is a computerized control system used to automate processes in
various industries.
Process Control System (PCS) - answerWhat does the acronym PCS stand for?
Energy Management System (EMS) - answerWhat does the acronym EMS stand for?
Building Management System (BMS) - answerWhat does the acronym BMS stand for
also know as BAS?
Safety Instrumented System (SIS) - answerConsists of an engineered set of hardware
and software controls which are especially used on critical process systems where life
safety, environmental or finanacial damange can occur.
Supervisory Control And Data Acquisition (SCADA) - answerWhat does the acronym
SCADA stand for?
SCADA - answerA system operating with coded signals over communication channels
so as to provide control of remote equipment (using typically one communication
channel per remote station).
Manufacturing Execution Systems (MES) - answerWhat does the acronym MES stand
for?
Human Machine Interface (HMI) - answerWhat does the acronym HMI stand for?
SHODAN - answerWebservice that allows you to put in Vendor and Model and will
show you IP addresses of where they can be reached
DMZ - answerProvides a series of function specific zones where services and data can
be shared between the zones. Added between levels of trust.
Business Zone - answerPurdue 4 and 5 Levels
Operations Zone - answerPurdue Levels 3,2,1,0
CIA - answerConfidentiality, Integrity, Availability
AIC - answerAvailability, Integrity, Confidentiality
Procurement Language Tool Kit - answerDHS - Designed to for asking technology
companies security questions when purchasing equipment
,PLC - answera digital computer used for automation of typically industrial
electromechanical processes, such as control of machinery on factory assembly lines,
amusement rides, or light fixtures
Ladder Logic - answeroriginally a written method to document the design and
construction of relay racks as used in manufacturing and process control
RTU - answerRemote Terminal Unit / Remote Telemetry Unit
DPR (Digital Protective Relay) - answerDigital Protective Relay - Microcontroller
measuring voltages and currents
IED (Intelligent End Device) - answerIntelligent End Device - DPR is an example of an
IED
Phase Measurement Units (PMU) - answerMeasures the electrical waves on an
electrical grid using Time Sync
Data Concentrator - answerMultiport device for concentrating and redistributing I/O data
in SCADA
Real Time Operating System (RTOS) - answerRuns on an embedded device for
scheduled processing of inputs. (usually round robin)
QNX - answerRTOS microkernel runs on MIPS, PowerPC, ARM,x86 owned by
blackberry
Microkernel - answerLow-level interface over hardware, minimum software to provide
control over hardware.
Monolithic Kernel - answerEntire OS working in Kernel space, high level interface, lots
of software over hardware.
VxWorks - answerRTOS Isolated Memory Space, often left with debug tools still
installed. Windriver
Windows CE - answerNOT a stripped down version of windows, Visual Studio
Development, includes Internet Explorer
Sensor Networks - answerI/O Racks Distributed. Insure proper process conditions
Field Device - answerValves, Solenoids, Pumps, Agitator, Burners and Compressors.
I/O
Digital I/O - answerValue communicated by simple On-or-Off signals. Relays, Switches,
and device Status.
, Analog I/O - answerValue communicated by varying Voltage or Current. Measure
Temperature, Pressure, Flow, Speed
Setpoints - answerDesired process output that a control system will aim to reach.
Safety Instrumented Systems (SIS) - answerMonitoring or remediate any situation
which may impact plant or personnel safety. Relief valve, ESD.
Communications Gateways - answerdata acquisition, storage, transmission, and
protocol conversion in ICS. RS232 or RS485 to TCP/IP
Front End Processing (FEP) - answerCommunicates to multiple RTUS using multiple
languages provides a single Modbus interface for all devices
Communication Integrity - answerMaintaining and assuring accuracy and consistency of
data over entire life cycle.
Scan Time - answerSCADA (1 sec to 1 min), DCS (0.05 sec to 1 sec), PCS (1ms to 1
sec), SIS (2ms to 1 sec)
System Size - answerSmall DCS (1 or 2 controllers, hundreds of I/O) Large DCS (7+
controllers, thousands of I/O)
Industrial Ethernet - answerEthernet with rugged connectors and temp ranges / TCP/IP
more common today
MODBUS - answerOpen device protocol, Serial and Ethernet, Master-Slave, up to 247
devices
DNP3 - answerUtilities. Westronic. IEEE standard 1815-2012. 65,000 devices, Event
Time Stamping, Serial or Ethernet
OPC (OLE for Process Control) - answerProcess communication technology based on
OLE, is old Microsoft technology. Consolidate data. Unpredictable port usage over
network.
PROFIBUS - answerSiemens Fieldbus. PROFIBUS DP (Factory) PROFIBUS FMS
(Multi-Master, Peer-to-Peer) PROFIBUS PA
ICCP (Inter-Control Center Communications - answerCommunication between electrical
operators (ISOs) or utilities. No auth, No encryption. IEC 60870-6 / TASE.2
Wide Area Communications - answerMany ICS are geographical disparate. Offshore
rigs, electrical systems, pipelines