- Our Locations
Network Security Solutions
The Owl Perimeter Defense Solution (OPDS) product line is designed to support the Critical Infrastructure markets. These cybersecurity products are oriented around protecting the data networks and digital assets (SCADA, PLCs, DCS, databases, historians, etc.) located at various critical infrastructure facilities including plants, mines, power plants, banks, substations, credit unions, pump stations, oil rigs, etc.
The concept is to protect the control systems within the facility by creating a secure cyber perimeter around the plant so that plant operations are not interrupted, sabotaged or otherwise impacted by some kind of cyberattack. The concern is not only for threats against single facilities (i.e. a nuclear power plants, refineries) but also a coordinated, simultaneous attack that shuts down multiple power substations, freshwater delivery systems or bank branches for example; leading to significant stress, disorder, and in the minds of the attackers, chaos.
SOLUTIONS:
The OPDS products use a patented, hardware design that, based on the laws of physics, won’t allow anything to enter the network. This design is based on the principles of data diodes which only allow data to flow in one direction, so data can be distributed to users outside the plant for things like maintenance monitoring, support, backups and production planning but there is no way for a hacker to enter the plant through the OPDS product. And the second mission? Using our proprietary DualDiode Technology, all of the OPDS products are able to transfer data out of the facility. This includes files, alarms, logs, events, streaming video, database data, and historian information, all from a number of sources including both proprietary (i.e. GE, OSIsoft, Rockwell Automation, Schneider Electric) and standards based (SQL, OPC, MODBUS) sources. This data can be single events, small files, extremely large files, streams of packets, a directory of files, the replication of a whole directory structure, a subset of a database or the replication of a whole database/historian.
Owl offers a range of products that support speeds from 10Mbps to 10Gbps, different form factors (card sets, 1U rackmount enclosures and DIN Rail models), along with a library of different software interfaces that support various interfaces. Please see below for information of the different solutions we offer.
FILE TRANSFER
- Reliably transfer files or data sets one-way across network/security boundaries. Owl solutions can transfer any file type of any size and can automatically replicate source directory structures on the destination network.
Learn More
REAL-TIME DATA STREAMING
- Transfer real-time data one-way, as packet streams. Owl solutions range from massive network-wide deployments transferring raw Ethernet packets at full line rate, to smaller tactical deployments with a single UDP video stream.
Learn More
DATABASE REPLICATION
- Replicate full or partial historians and relational databases across network domain boundaries. Owl enables insert/update/delete functionality and complete replication from source schema, with high availability and historical backfill capabilities.
Learn More
REMOTE MONITORING
- Enable real-time remote monitoring without remote access. Owl solutions securely transfer syslog, SNMP, SIEM, operations alarms & events, and HMIs to external end-users while keeping critical systems isolated and protected.
Learn More
PROCESS CONTROL INTERFACES
- Securely transfer DCS and SCADA data to external/business networks without jeopardizing plant network security. Owl solutions have been tested and verified to support most major process control vendor systems.
Learn More
SOFTWARE UPDATES & PATCHES
- Safely vet, import, and install software updates in isolated control networks. Owl solutions enable secure “low to high” data transfers with a full arsenal of filtering, antivirus, and verification.
Learn More
USE CASES & VERTCALS
-
GOVERNMENT, DEFENSE & INTELLIGENCE
As one of the few cybersecurity vendors capable of meeting the stringent requirements of the U.S. intelligence and defense communities, Owl provides hardened, accredited solutions to all branches of the U.S. Department of Defense, various U.S. intelligence, federal and state government agencies, and NATO member country agencies and ministries.
Learn more -
CRITICAL INFRASTRUCTURE & INDUSTRIAL
Owl protects the world’s largest energy production plants and equipment, high-security nuclear facilities and laboratories, and other industrial organizations and critical infrastructure, including power plants, power transmission & distribution, water/wastewater, transportation, manufacturing, and mining.
Learn more -
COMMERCIAL & ENTERPRISE
Owl’s data-agnostic cybersecurity solutions enable air-gap level security to segment and secure highly sensitive networks in some of the most prestigious businesses in the U.S. and abroad. Customers include Fortune 500 enterprises across financial services, healthcare, pharma/biosciences, hospitality, and other commercial institutions and organizations.
Learn more
APPLICATIONS & PROTOCOLS SUPPORT
- FoxGuard Patch Management
- GE Historian
- GE OSM Support
- PAS Alarm Management
- Schneider RemoteWatch
- Schneider Wunderbare eDNA Historian
- Schneider Wunderbare Historian
- Scientech R*Time
- OSLsoft PI Historian
- Rockwell Automation
- RSLinx Classic
- FactoryTalk Gateway
- FactoryTalk - Historain
- Rolls Royce PMS
- Email Alerts and Events (SMTP)
- FTP/SFTP
- Modbus
- OPC Foundation certified, Supporting DA, A&E
- Remote File Transfer For Reporting, Alarms, Events
- Remote HMI Screen Replication
- SQL Database Replication
- SNMP Traps
- Syslog Transfer
- TCP Transfer
- UDP, Multicast, Broadcast, Unicast(Data Transfer and Video)
SUPPORTED VENDORS
Existing Owl financial services industry customers are using our products in a number of different ways, leveraging the core technology to fit different work flows and security scenarios including:
Storage of ATM Photo Images
Imagery taken during ATM transactions is transferred from the remote ATM locations to a central repository for archiving. Using the DualDiode allows the information to flow into the archive but prevents access into the archive by other parties and or the removal of any material. Watermarks are used on the data and content inspection is performed. This is very similar to many of the DoD and Intelligence agency deployments we have were information is gathered in the field and secured at a central location.
Remote Monitoring of Data Center
A highly secured data center was “air-gapped” for security reasons. This required on-site or close proximity support personnel. With the use of a data diode, monitoring data (error messages, alarms, syslog msgs, etc.) can be transferred out of the secured enclave without incurring any cybersecurity threats. Support personnel can now monitor the data center remotely and do not have to be on-site 24x7. This is an example of a data diode securing a facility while transferring data externally for remote monitoring purposes.
Transfer of Sensitive Accounts to Repository
This institution maintained accounts with high-profile government officials and wanted to ensure those accounts were well protected. A DualDiode was deployed to transfer the account information into a highly secured repository. This is an example of a data diode securely transferring data into a secured facility to prevent access.
Transfer of Large Files and High Volume Data Flows
The DualDiode 10Gbps solution is capable of quickly transferring very large files or large data flows at full line rate. Customers can use this capability to either move files like “captured” images of laptops or replicate full network flows for further analysis and threat detection.
SECURE REMOTE COMMAND & CONTROL
For security purposes, many organizations have disconnected or “air gapped” their OT networks from their IT networks. This prevents threats in the IT network from infecting OT systems. However, as data-driven organizations begin to merge OT and IT, business users require access to OT data. In most cases, this access can be achieved through the use of a one-way data diode to transfer the data from OT to IT. However, in some cases, users have a periodic need for remote access, including remote help desk or remote command and control, which require bi-directional communication. The Owl ReCon is a hardware-based cybersecurity device, designed to restrict and secure bi-directional communications, enabling secure remote command and control with greatly reduced risk to connected OT systems.
