Table of Contents
Advertisement
3.10
Planning information security
Information security is a vital aspect in automation engineering particularly to ensure the
availability and interference-free operation of industrial plants. To ensure communication and
information security via WLAN for the HMI device, you need to protect the communication
system from attack.
Expect:
● Attacks from the outside
To protect against external attacks, you must protect the WLAN in the same way you
would protect office communication, namely with a firewall.
● Attacks from the inside
Investigations have shown that the majority of attacks on information security are
executed from inside the plant. To ensure information security, you need to take action
for:
– Configuration and parameter settings
– Productive operation data
Organizational measures
The organizational measures to ensure information security are described in the following
documents:
● IEC 61784-3-3:2007 Functional safety field busses – Additional specifications for CPF 3
● PROFIsafe - Environmental Requirements
Specify the organizational measures you must implement in accordance with your plant's
requirements to achieve the highest possible information security for communication via
WLAN. In doing so, take into consideration:
● Configuration phase
● Process control phase
Check the interplay of the specified measures.
Wireless Teach Pendant F IWLAN V2
Operating Instructions, 08/2010, A5E02453837-01
Possible objectives of an attack are the project and the parameter settings of the HMI
device.
The productive data can be manipulated, for example by sending a series of false
PROFIsafe message frames which prevent the plant from being switched off.
Data transfer between HMI device and access point is protected by the AES
encryption mechanism. Manipulation of productive data is prevented in this manner.
PRELIMINARY II
1.7.2010
Planning the use
3.10 Planning information security
59
Advertisement
Table of Contents
