Requirements
The special requirements of communication in an industrial environment (e.g. communication
in real time) result in additional requirements for security in industrial use:
• Protection against interaction between automated cells
• Protection of network segments
• Protection from unauthorized access
• Scalability of the security functionality
• No inuence on the network structure.
Threats
Threats can arise from external and internal manipulation. Loss of data security is not always
caused by deliberate actions.
Internal threats arise due to:
• Technical faults
• Operating errors
• Errors in programs
This internal hazards are compounded by external threats. The external hazards do not dier
from the known threats in the oce environment:
• Computer viruses and computer worms
• Trojan horses
• Unauthorized access
• Password phishing.
Password phishing means attempting to get a user to divulge access data and passwords by
masquerading as a dierent identity in an e-mail.
Precautions
The most important precautions against manipulation and loss of data security in an industrial
environment are:
• Filtering and verication of data trac through virtual private networks (VPN). A virtual
private network is used to exchange private data in a public network (e.g. the Internet). The
most common VPN technology is IPsec. IPsec is a collection of protocols based on the IP
protocol at the network layer.
• Segmentation into protected automation cells. The aim of this concept is to protect devices
in the network through security modules. A group of protected devices forms a protected
automation cell. Only security modules in the same group or the device protected by you can
be interchanged.
Safety notes
2.2 Data security in automation
SIRIUS 3RW5 PROFINET communication modules
12 Equipment Manual, 05/2021, A5E35631297002A/RS-AD/004
To Next Page
Loading...
