MerlinM2M Encryption Security Platform secures SCADAs unique high risk challenges in different network zones, automated processes, and device networks, including servers, human machine interface (HMI), controller logic, and industrial network protocols (IED) utilizing dynamic scalable keys and passwords.The weakest link in a SCADA system is transmission between machines, says Paul "Prem" Sobel, Founding CTO, MerlinCryption, The worst scenario is a criminal takeover of machine control. Protecting access to status, states, reports, machine software updates, commands, and controls is critical.The most effective solution is a dynamic encryption engine, working in tandem with strong authentication in one platform, Sobel advocates, The encryption should be unique for every company.The MerlinM2M cryptosystem is built on Anti-Statistical Block Encryption (ASBE) and utilizes variable key length. Each key scales in size between 2008 bits and 2 GB. Additionally, the encryption engine allows scalable passwords up to 64 KB.The algorithm is not subject to attack models and methods of Cryptanalysis, which secures data, networks, and endpoints across the entire SCADA infrastructure. Every encrypted transmission between MTUs, PLCs, and RTUs, is different, as the algorithm produces different cyphertext with varying length, even when repeating the same plaintext, key, and password input.MerlinCryptions industrial partners highly benefit from customization of each encryption engine, which is unique to the individual companys SCADA system and is not interoperable with any other custom engine.MerlinM2M provides dynamic multi-factor authentication and is run by a scripted controller, which essentially wraps the entire encryption and authentication process into a tightly customized and impenetrable sequence of execution.The cryptosystem platforms data generator outputs keys and passwords that are generated-destroyed-recreated on demand, making key/password transfer between end points unnecessary. The communication and storage of encryption keys and passwords are not needed.MerlinCryption supports SCADA systems and control architecture by using flexible security designed with a small memory footprint in flash memory or files. Written in C# for Windows and in C for DOS, Linux, and QNX, the encryption software is portable to any device for RTU security. The payload can by transmitted by any communications protocol and on any network.
