Table of Contents
Advertisement
Industrial security
2.3 General security measures
Figure 2-1
Defense in depth strategy
● Plant security
Plant security represents the outermost protective ring. Plant security includes
comprehensive physical security measures, e.g. entry checks, which should be closely
coordinated with protective measures for IT security.
● Network security
The measures, grouped under the keyword "Network security", form the core of the
protective measures. This refers to the segmentation of the plant network with limited and
secure communication between subnetworks ("secure islands") and the interface check
with the use of firewalls.
● System integrity
"System integrity" represents the combination two major measures. PC-based systems and
the control level must be protected against attacks. Steps include the following measures:
– User authentication for machine or plant operators with individual authorization levels
– Integrated access protection mechanisms in the automation components to prevent
– The use of antivirus and whitelisting software to protect PC systems against malware
– Maintenance and update processes to keep the automation systems up-to-date
28
unauthorized changes via the engineering system or during maintenance
(e.g. patch management, firmware updates, etc.)
SIMOTION P320-4 E / P320-4 S
Commissioning and Hardware Installation Manual, 11/2016
Advertisement
Table of Contents
