IT security extensions for PROFINET

• Published in: IEEE International Conference on Industrial Informatics (INDIN) Vol. 1; pp. 407 - 412
• Main Author: Niemann, Karl-Heinz
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.07.2019
• Subjects: Computer crime; cyber security; Ethernet; Fourth Industrial Revolution; Informatics; IT security; PROFINET security; Protection; protocol extensions; Protocols; Real-time systems; Security
• ISSN: 2378-363X
• DOI: 10.1109/INDIN41052.2019.8972209

The impact of vertical and horizontal integration in the context of Industry 4.0 requires new concepts for the security of industrial Ethernet protocols. The defense in depth concept, basing on the combination of several measures, especially separation and segmentation, needs to be complimented by integrated protection measures for industrial real-time protocols. To cover this challenge, existing protocols need to be equipped with additional functionality to ensure the integrity and availability of the network communication, even in environments, where possible attackers can be present. In order to show a possible way to upgrade an existing protocol, this paper describes a security concept for the industrial Ethernet protocol PROFINET.