Press Release

Verano Announces Industrial Defender™, First Real-time security Suite for Industrial Operations
Industrial Defender Watch Safeguards Control Networks, Mitigating Business Risk While Providing Mandate Compliance

MANSFIELD, Mass., June 10, 2003

Verano, Inc., the leading provider of cyber-security management and control solutions for mission-critical industrial operations, today introduced Industrial Defender™, the first realtime security software and services suite designed specifically for industrial control environments. The security solution is targeted for use by mission-critical industries including power generation, energy distribution, water treatment, waste handling and transportation.

Industry analysts report that while cyber-security measures are often in place at the enterprise network level, critical industrial infrastructure often lacks effective cyber protection at the control system level. A successful cyber attack at the level where computers directly control facility equipment can be catastrophic in both human and economic terms. Additionally, federal and state government bodies recognize the need for action and are establishing new cyber-security mandates for mission-critical industries. Verano's Industrial Defender suite comprises three offerings designed to meet both security threats and government requirements for industrial operations: Industrial Defender Watch, Industrial Defender Guard and Industrial Defender Control. Industrial Defender Watch is available today, while both Guard and Control modules will be available at later dates.

"Unprecedented global events have permanently raised the stakes of potential security breaches to missioncritical operations," said Brian Ahern, president and CEO of Verano. "With increasing reports of cyber incidents compounded by a surprising 70 percent of cyber-intrusion incidents originating from within companies, it is essential to build a comprehensive defense, response and prevention plan in the event of a security breach. Verano's unique combination of control system experience and cyber-security expertise will provide industrial operations with the tools to safeguard their assets and respond effectively to new regulatory requirements and security mandates."

"Securing industrial operation control systems requires specific control system network design and application knowledge versus traditional IT network and network security knowledge," said Bill Moore, vice president, ARC Advisory Group. "Control systems of many mission-critical operations are at high risk-most were not designed with security in mind and open architectures leave systems vulnerable to attacks. Verano is helping industrial operations discover where these vulnerabilities exist, enabling personnel to protect and manage critical infrastructure while integrating and delivering real-time information from control systems to the enterprise.

Until now, process control engineers have had to borrow and modify tools from IT to protect and manage critical infrastructure. Verano's Industrial Defender provides the first solution in this market to mitigate risk and ensure continuation of operations in the real-time environment."

Verano's first offering within the Industrial Defender suite is Industrial Defender Watch. Watch combines a comprehensive vulnerability audit and assessment of existing control systems by Verano's professional service engineers, with a real-time security monitoring, detection and notification system built on National Security Agency (NSA) Security Enhanced version of Linux. Watch is designed to consolidate all industrial operations monitoring and detection of potential security breaches to existing control system applications and servers, firewalls, as well as other security devices such as intrusion detection systems while also monitoring system performance. Upon detection of a potential security breach, Watch provides configurable notification mechanisms to alert appropriate personnel of the security violations. Guard adds a cyber-security shield to safeguard existing infrastructure, designed to protect it from all types of cyber intruders. Control completes the suite by providing secure, supervisory control and monitoring for critical infrastructure, as well as providing system recovery capabilities.

Before Watch can be fully deployed, Verano professional service engineers install the Industrial Defender Watch server and configure "intelligent agents" to monitor each control device tied to the control network as well as any existing firewall or security components. Once the server and agents are in place, a Verano professional services member will perform a security vulnerability assessment, involving a series of tests using the latest tools from the hacking community and tactics employed by insiders to potentially damage control networks.

Following this step, Verano will deliver a complete security vulnerability assessment report, review the vulnerabilities of the company's control system and then recommend how to correct the vulnerabilities.

Industrial Defender Watch Features:

• 24x7x365 real-time monitoring, detection and notification of security threats for both network assets and plant applications
• Vulnerability audit and assessment by Verano professional service engineers
• Real-time alarm and event management to view and acknowledge cyber security or system performance incidents
• "Intelligent Agents" that detect patterns and symptoms on control devices, passing only the needed information across the network to the Watch server never using more than one percent of your control network resources
• Real-time database and calculation engine built on over 12 years of field proven industrial real-time technology provides for centralized storage for all security information
• Network Intrusion Detection (NIDS) application that can detect more than 1,800 signatures
• Email incident notification, enabling instant notification of an incident by wireless PDA, pager or cell phone
• Pre-built reports show cyber-security incidents by alarm levels, device category or date and time for compliance with security procedures and policies
• Delivered as an appliance, utilizing the security extensions from NSA

---

Contacts

Todd Nicholson		Meredith Schwenk
Industrial Defender, Inc.		SHIFT Communications
+1 (508) 718-6705		+1 (617) 779-1830
tnicholson@industrialdefender.com		mschwenk@shiftcomm.com