| Paper |
Title |
Other Keywords |
Page |
| WPPB38 |
Update on the CERN Computing and Network Infrastructure for Controls (CNIC)
|
controls, factory, collider |
472 |
| |
- S. Lueders
CERN, Geneva
| |
Over the last few years modern accelerator and experiment control systems have increasingly been based on commercial-off-the-shelf products (VME crates, PLCs, SCADA, etc.), on Windows or Linux PCs, and on communication infrastructures using Ethernet and TCP/IP. Despite the benefits coming with this (r)evolution, new vulnerabilities are inherited too: Worms and viruses spread within seconds via the Ethernet cable, and attackers are becoming interested in control systems. Unfortunately, control PCs cannot be patched as fast as office PCs. Even worse, vulnerability scans at CERN using standard IT tools have shown that commercial automation systems lack fundamental security precautions: Some systems crashed during the scan, others could easily be stopped or their process data be altered. During the two years following the presentation of the CNIC Security Policy at ICALEPCS2005, a “Defense-in-Depth” approach has been applied to protect CERN's control systems. This presentation will give a review of its thorough implementation and its deployment. Particularly, measures to secure the controls network and tools for user-driven management of Windows and Linux control PCs will be discussed.
|
|
|
|
| RPPA04 |
Automating the Configuration of the Control Systems of the LHC Experiments
|
controls, collider |
529 |
| |
- P. Golonka, F. Varela, F. Calheiros
CERN, Geneva
| |
The supervisory layer of the Large Hadron Collider (LHC) experiments is based on the PVSS SCADA tool and the Joint Control Project (JCOP) framework. This controls framework includes a Finite State Machine (FSM) toolkit, which allows operation of the control systems according to a well-defined set of states and commands. During the FSM transitions of the detectors, it will be required to reconfigure parts of the control systems. All configuration parameters of the devices integrated into the control system are stored in the so-called configuration database. In this paper the JCOP FSM-Configuration database tool is presented. This tool represents a common solution for the four LHC experiments to ensure the availability of all configuration data required for a given type of run of the experiment, in the PVSS sub-detector control applications. The implementation strategy chosen is discussed in the paper. This approach enables the standalone operation of different partitions of the detectors simultaneously while ensuring independent data handling. Preliminary performance results of the tool are also presented in this paper.
|
|
|
|
| RPPA05 |
Software Management of the LHC Detector Control Systems
|
controls, target, background, collider |
532 |
| |
- F. Varela
CERN, Geneva
| |
The control systems of each of the LHC experiments contain on the order of 150 computers running the back-end applications that are based on the PVSS SCADA package and the Joint Controls Project (JCOP) Framework. These inter-cooperating controls applications are being developed by different groups all around the world and have to be integrated by the experiments’ central controls teams. These applications will have to be maintained and eventually upgraded during the lifetime of the LHC experiments, ~20 years. This paper presents the centralized software management strategy based on the JCOP framework installation tool, a central repository shared by the different controls applications and an external database that holds the overall system configuration. The framework installation tool allows installation of software components in the sub-detector PVSS applications and eases integration of different parts of a control system. The information stored in the system configuration database can also be used by the installation tool to restore a computer in the event of failure. The central repository provides versioning of the various software components integrating the control system.
|
|
|
|