Security software vendor Verano's latest release is geared toward industrial network control environments, especially power generation plants, energy distribution systems and water treatment plants.

"The IT network is being linked to the real-time control network, and that introduces a path for security breaches and intrusions," says Lori Dustin, vice president of marketing for Verano. "Enterprise IT applications are designed to control data integrity primarily and not network control applications. The system expertise is very different."

Network control systems for the targeted industries are typically based on older technology with slower network bandwidth, typically 10M bit/sec vs. at least 100M bit/sec for the typical IT system. This leads to a mismatch which can cause problems. The firewalls, intrusion detection systems and other measures often employed by the IT department provide a "false sense of security" for the industrial network control systems, she suggests.

The first product in the suite, Industrial Defender Watch, is available immediately. That product combines vulnerability audit and assessment of existing control systems by Verano's service engineers, with a real-time security monitoring, detection and notification system built on the National Security Agency (NSA) Security Enhanced version of Linux.

Watch consolidates the industrial operations monitoring and detection of potential security breaches, with information from other control system applications, firewalls and security devices in place. The product alerts appropriate personnel when a potential breach is detected, and can erect a secure shield to the existing infrastructure if the customer chooses.

Verano's engineers install and configure the Defender Watch Server, delivered as an appliance, and an administrative console. Secure monitoring agents are installed on selected security components. After the assessment is conducted, the company is issued a report showing where the vulnerabilities exist and how to correct them.

The initial industry target is the power generation industry. Pricing is based on the number of plants or units at $125,000 per unit for Defender Watch. Plants with multiple units will be priced based on total megawatts generated.