SCADApedia
AAA  AAA 

InTech Wireless Article

The cover story of the June issue of InTech is on wireless. I didn’t see much new information in the article, perhaps with the exception of some survey numbers, but there were some bold statements.

“There are numbers of applications where wireless is cost effective and useful today,” said Wayne Manges, program manager of industrial wireless programs at Oak Ridge National Laboratories, managed by UT-Battelle and chairman of the ISA-SP100, Wireless Systems for Automation committee.

Nothing controversial there. Wireless communications eliminates the difficulties of running cables and potential noise issues. It is a very attractive technology.

“Right now the industries using wireless most are the ones that can not afford downtime, like refining, power generation, and even sewage treatment plants,” Manges said.

“Power generation (downtime) right now translates into dollars from the bottom line.” Sewage treatment plants can’t afford downtime because they are approaching capacity from increased development and population growth, he said.

Two points. The article is focused on wireless LAN technology for plants. This makes sense. A variety of wireless WAN technology has been used for years. It is the LAN technology that is new and the wireless LAN security protocols that have had the well publicized issues.

However, I’m not sure that industries that “can not afford downtime” should be the early adopters. Wouldn’t the security risks to integrity and availability most likely be unacceptable to a system that can never go down.

“Currently, there is commercial off-the-shelf technology that can make wireless as secure as wired,” Manges said. On top of that, he said, “there is technology on the horizon that can make wireless more secure than wired.”

Now this is a bold statement. I’m assuming he is talking about add-on VPN technology (similar to the technology for secure remote access from the Internet) that secures the communication between the endpoints and doesn’t rely on the security in the wireless protocols. Of course, this adds product and life cycle costs to the solution.

Even with that technology would a wireless VPN be as secure as wired? Could the wireless signal be disrupted or jammed without the physical access that would be required to snip a wire? Strictly speaking, isn’t a wireless signal easier to capture and analyze than a wired signal without physical access, even if the analysis is equally difficult. I suppose you could implement a spread spectrum technology such as direct sequence or frequency hopping and shield the building, but this is starting to get to be more costly than running cables.

A fair statement might be “the security risks to wireless can often be reduced to an acceptable level with off-the-shelf technology”, but a careful statement like that isn’t as interesting for publication.

Comments

Comment from Matt Franz
Time: June 23, 2006, 6:19 pm

In many cases (and several of the wireless providers and control systems vendors in SP-100) we are not talking about 802.11 we are talking about non-IP sensor networks specifically designed for industrial environments.

So the cat *is* out of the bag and control system vendors such as Honeywell and Emerson are moving down the path of replacing non-TCP/IP wired fieldbus networks with wireless ones.

Many of the these-are self-healing ad-hoc networks quite unlike 802.11 and more like Zigbee.

Comment from Jake Brodsky
Time: June 26, 2006, 12:17 pm

(Pet Peeve Mode On) GRRRRRRR In addition to what I do in my day job, I was also an early experimenter with spread spectrum gear as a ham radio operator. There are limits to this technology that most sales and even many standards people ignore at their peril.

First let me put on my RF engineer’s hat. Spread spectrum is different. You can’t install most front end RF filters on these radios because it would be difficult to synchronize with the remote end after accounting for group delay problems. So most low noise front end amplifiers for spread spectrum radios are WIDE OPEN.

Why does this matter? Well, even though many point to the math and say you’d need so many watts per Hz to introduce enough noise to break the link, most of these folks don’t know that a single strong narrowband signal can also cause the front end amplifier to rectify the signal and change it’s bias point. This situation is known as blocking. It’s a common malady among wide band scanner receivers and it’s all too easy to perpetrate this upon a spread spectrum receiver.

In other words, a Denial of Service attack is much easier to perpetrate on these devices than most people are willing to acknowlege. But just try and explain this to a computer nerd who thinks that “Wireless” (Why not call it what it is: RADIO) is the answer to the world.

(End of Pet Peeve Mode)

Write a comment