ATX West - Icon Labs Releases First Ever Embedded Protection for Internet of Things Devices that Connect via Modbus Protocol

Icon Labs Floodgate Modbus Packet Filter Provides Advanced Security for Industrial IoT and RTOS-based Devices

Icon Labs, (www.iconlabs.com), a leading provider of embedded networking and security technology, today announced the release of its Floodgate Modbus Protocol Filtering product. This extension to Icon Labs Floodgate Security Framework adds critical protection capabilities for Industrial IoT and RTOS-based devices.


Icon Labs will be demonstrating this solution on the Renesas R-IN32 Industrial Automation development platform in the Renesas booth (#4594) at ATX West in Anaheim, California February 9-11, 2016.

The Floodgate Modbus Protocol filter provides the critical missing layer of security for Modbus/TCP devices. Integrated into the device, Floodgate Modbus Protocol filtering utilizes deep packet inspection to enforce virtual network segmentation and to control packets processed based upon source network address, function code, and packet data contents.

"The Modbus/TCP protocol currently lacks any real security, making these devices sitting ducks for even moderately skilled hackers," said Alan Grau, President of Icon Labs. "Several attempts to add security to Modbus/TCP have been proposed, but none provide a cost-effective solution for legacy devices while maintaining interoperability with the protocol standard. Modbus packet filtering addresses this problem by enforcing policies and inserting a layer of control without changing the underlying protocol."

Floodgate Modbus Protocol filtering is an extension of the Floodgate Firewall, an endpoint firewall solution designed for embedded and RTOS-based systems. The solution integrates with the native TCP/IP stack on the device and provides control over the packets processed by the device. The Modbus Protocol filtering extension provides control over the Modbus packets processed by the device based upon Modbus function code, originating IP address, or Modbus packet content. Integration with the Floodgate Agent enables detection and reporting of malicious traffic.

"Achieving security while maintaining interoperability with legacy solutions is critical to the adoption of the Industrial IoT," stated Warren Kurisu, Director of Product Management - Runtime Solutions, Embedded Systems Division, Mentor Graphics. "Adding a layer of protection for Modbus/TCP devices closes a critical security loophole for Industrial Automation Systems."

Icon Labs Floodgate Security Framework is a comprehensive security solution for embedded devices providing security management, secure boot, intrusion detection, secure firmware updates, and an embedded firewall. These capabilities provide the building blocks for achieving EDSA certification, ISA/IEC 62443 compliance, and/or compliance with the NIST cybersecurity framework.

Icon Labs products provide embedded security for IoT and Machine to Machine (M2M) solutions such as aerospace, military and space probes, industrial and medical control devices, and consumer electronics products. The Floodgate Security Framework provide a "defense in depth" solution to protect control units and endpoint devices from cyber threats, aid in compliance with regulatory mandates and guidelines, and gather and report command, event and device status information for audit requirements.

About Icon Laboratories, Inc.
Icon Labs, a 2014 Gartner "Cool Vendor" and 2015 Gartner "Select Vendor", is a leading provider of security solutions for IoT and embedded devices, including the award-winning Floodgate Defender and Floodgate Security Framework. Founded in 1992, Icon Labs is headquartered in West Des Moines, Iowa. For more information, visit www.iconlabs.com.

Featured Product

TM Robotics – Shibaura Machine THE SCARA range

TM Robotics - Shibaura Machine THE SCARA range

The THE range from Shibaura Machine is an extensive line up of SCARA robots. Available in four arm lengths THE400 (400mm), THE600 (600mm) and the most recent THE800 (800mm) and THE1000 (1000mm), this range is suitable for assembly, handling, inspection and pick and place processes in varied industrial applications. The THE1000 boasts a 20kg payload capacity and an impressive 0.44 second cycle time, providing high speeds for processes with large components. In fact, the range has been recognised for as the price-to-performance leader compared to other SCARA models in its price range due to its impressive speed versus payload capacity.