white paper on industrial automation security in fieldbus and

More documents

Recommendations

Info

43.4.3 Internet Protocol ............................................................................................................. 243.4.4 Transport layer ............................................................................................................... 253.4.5 Network configuration .................................................................................................... 253.4.6 Network topology ........................................................................................................... 263.4.7 Industrial Ethernet protocols ........................................................................................... 273.5 Recommendations for enhancing security ............................................................................... 314 Security in field devices ................................................................................................................. 324.1 Security threats and issues ...................................................................................................... 324.1.1 Information leakage ........................................................................................................ 324.1.2 Tampering risks .............................................................................................................. 324.2 Simple field devices ............................................................................................................... 334.3 Embedded devices with real-time operating systems ............................................................... 334.4 Embedded devices with general-purpose operating systems .................................................... 344.4.1 Operating system vulnerabilities ..................................................................................... 344.4.2 Open-source systems ...................................................................................................... 344.4.3 General-purpose operating systems ................................................................................. 344.5 Recommendations for enhancing security in devices .............................................................. 354.5.1 Debugging interfaces ...................................................................................................... 354.5.2 Communication interfaces .............................................................................................. 354.5.3 Firmware protection ....................................................................................................... 364.5.4 Device parameters and configuration .............................................................................. 374.5.5 Firmware updating ......................................................................................................... 374.5.6 Superfluous information ................................................................................................. 375 Security in wireless communications.............................................................................................. 385.1 Security of wireless technology .............................................................................................. 385.1.1 IEEE 802.15.4 ................................................................................................................ 395.1.2 Wireless LAN ................................................................................................................ 39
55.1.3 Bluetooth........................................................................................................................ 395.2 Recommendations for improving wireless network security.................................................... 406 Summary ....................................................................................................................................... 417 References ..................................................................................................................................... 42
Page 1 and 2: 1WHITE PAPER ON INDUSTRIAL AUTOMATI
Page 3: 3Table of Contents1 Introduction an
Page 8 and 9: 8professional attackers are able to
Page 10 and 11: 10Table 1. A list of published IEC
Page 12 and 13: 12Information needs to be available
Page 14 and 15: 14Depending on the communication li
Page 16 and 17: 16observed with the purpose of reve
Page 18 and 19: 18Table 2. An overview of a few fie
Page 20 and 21: 20When the bus system starts, maste
Page 22 and 23: 22As with e.g. Modbus RTU, an intru
Page 24 and 25: 24malicious activity. The Physical
Page 26 and 27: 26filtering is another barrier for
Page 28 and 29: 28Table 4. An overview of a few ind
Page 30 and 31: 303.4.7.3 EtherCATEtherCAT is a rea
Page 32 and 33: 32devices should be assessed, prefe
Page 34 and 35: 344.4 Embedded devices withgeneral-
Page 36 and 37: 36not intended for the end-user sha
Page 38 and 39: 385 Security in wirelesscommunicati
Page 40 and 41: 40possibilities for a device sniffi
Page 42 and 43: 427 References[1] F-Secure Corporat

white paper on industrial automation security in fieldbus and

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?