Problems with virus scanning in DCS systems

Of course, you can install antivirus software; it’s best to remove components such as the optical drive.

Remove all unnecessary functions, remove the optical drive and floppy drive, lock down the control panel, install antivirus software, and use an operator-specific keyboard.

For general use, antivirus software can be installed, but it is not suitable for DCS systems. My understanding is: 1. From an antivirus perspective, you need to regularly update the antivirus software and its virus database. DCS systems are generally not connected to the Internet; to perform an upgrade, it is necessary to transfer the upgrade package from another computer to the DCS system using a USB drive, which makes upgrades inconvenient. 　　2. Consider conflicts arising from compatibility issues between monitoring software, configuration software, etc., and antivirus software ； 　　3. Antivirus software monitors the system’s operations continuously, frequently checking for suspicious files, and may interfere with the normal functioning of the system under certain circumstances ； 　　Considering the above factors, it is better not to install antivirus software on the DCS system. The best way to prevent viruses from entering is to remove the optical drive and block the USB ports. 　　Furthermore, when control room operators use industrial computers to play games or watch DVDs, it not only affects their duties but also risks introducing viruses into the DCS system, leading to crashes and other issues; in severe cases, this can result in major safety accidents. Therefore, managerial and technical measures must be taken to strictly prohibit it. 　　

Those who support the above view should have it prohibited by the operating rules. Additionally, external network connections can be established through server mirrors or by installing hardware one-way firewalls at the exit.

Under normal circumstances, as mentioned on the 4th floor, no antivirus software is installed. When antivirus protection is needed, we usually ask engineers to install it temporarily to carry out scanning, and then uninstall it afterward. Regarding what LZ mentioned, it seems that the management at your factory is a bit chaotic; generally, we do not allow the installation of things such as drives on the computers used at work stations or on computers that are not belonging to managers. There is also locking of the operation interface, to prevent operators from leaving it. For example, blocking the WIN key or other keys that are not needed on the keyboard. (There are specialized software programs to lock the keyboard)

According to the DCS control room management regulations: operators in the control room are strictly prohibited from using the operation stations to play games or watch DVDs, and the use of USB drives or external hard drives and other devices that could introduce viruses into the DCS system is also forbidden. Moreover, antivirus software must be installed for operation, and it has to be genuine antivirus software.

I support the view from the 4th floor. Additionally, here are a few points: 1. Some DCS reports are created using macro files, and antivirus software might consider them as viruses and delete them； 2. The optical drive, floppy drive, and USB ports can be disabled ； It is not possible to remove the optical drive or floppy drive, as the operating system may experience issues and the computer might restart; removing them could cause errors, and reinstalling the system would be very troublesome. Suggestions: 1. Find management solutions to address the issue whenever it arises in the game. 2. Methods for implementing on computer peripherals ； This post was last edited by Mobei Yihai on 2009-1-6 20:06.]

By using industrial control computers – specialized machines for industrial applications – it is possible to effectively prevent operators from using the systems beyond their authorized permissions. These industrial control computers have lockable panels for common interfaces such as optical drives and floppy drives, and the USB ports can be disabled manually. Additionally, operation consoles are usually locked when new projects start, and workstation software restricts operators to using only industrial-related software, preventing them from exiting the system or using any other programs

What was said upstairs is absolutely correct – the USB ports and optical drives on the GUS station must not be used casually; lock them up! ~! ! Safety!

This needs to be analyzed from two perspectives: First, if the operators in a factory leave their work screens to play games or do other things, it indicates a problem with management, and the company must first strengthen its management practices. Secondly, as there are increasingly higher demands for the openness of systems, data exchange between DCS systems, MES systems, and ERP systems is becoming more frequent. As a result, various DCS manufacturers provide antivirus software that is certified for use with their own systems; these software solutions are usually brands such as Norton. Therefore, if you want to install antivirus software on your system, it’s best to contact the DCS manufacturer to confirm which brand of antivirus software can be used.