SSUS

Owl’s Secure Software Update Solution (SSUS) is designed to address the need to securely transfer software updates and other files into the control network. SSUS provides a mechanism that takes previously vetted files and subjects them to a comprehensive set of security scans. Once approved, SSUS uses Owl’s proprietary data diode technology to transfer the file(s) across the security boundary of the OT network and into the plant. SSUS eliminates the security risk resulting from “Walk-Netting” a file across the security boundary using portable media devices like flash drives.

Safely Import Software Updates into Closed Networks

SSUS provides a mechanism that takes previously vetted files and subjects them to a comprehensive set of security scans. Once approved, SSUS uses Owl’s data diode technology to transfer the file(s) across the security boundary of the OT network and into the plant. SSUS eliminates the security risk resulting from “Walk-Netting” a file across the security boundary using portable media devices like flash drives.

Checks and Scans

Configured by a system administrator, the scanning aspect of SSUS supports a number of checks including: file extension check, ASCII scan check, malware scanning and validating the file against a manifest (or list) consisting of pre-configured hash numbers. Files that pass the security scan are then transferred across data diode while files that fail the scan are quarantined and are not transferred into the control network. SSUS supports the ability to select and scan a single file or an entire directory of files. All transactions are logged in an Audit Table which is exportable to Microsoft Excel and other reporting software packages.