Secure communication for Industrie 4.0
-
Lutz Jänicke
Dr. Lutz Jänicke is the Product & Solution Security Officer of the Phoenix Contact-Group and is responsible for coordinating groupwide activities and processes. He is active in standardization committees and industry associations including the Plattform Industrie 4.0, where he is chair of the secure communication sub-working group. Before taking up the corporate role, Dr. Jänicke was CTO at Innominate Security Technologies AG (now Phoenix Contact Cyber Security GmbH), a provider of industrial security gateways.
Abstract
Industrie 4.0 fosters the concept of systems within one company to communicate with external systems in other companies or cloud services. Such communication across security domains creates new challenges as multiple stakeholders with different, sometimes conflicting objectives are involved. Typical examples are confidentiality versus monitoring. Current security architectures and protocols are not designed to resolve these challenges.
Zusammenfassung
Industrie 4.0 baut auf das Konzept der Kommunikation interner Systeme mit den Systemen anderer Unternehmen oder in der Cloud. Diese Kommunikation über Sicherheitsdomänen hinweg erzeugt neue Herausforderungen, da die Sicherheitsinteressen mehrerer Beteiligter mit zum Teil unterschiedlichen Schutzzielen berücksichtigt werden müssen. Typische Zielkonflikte entstehen z. B. zwischen Vertraulichkeit und Überwachungsmöglichkeit. Aktuelle Sicherheitsarchitekturen und Protokolle sind nur begrenzt geeignet, diese Konflikte zu lösen.
About the author
Dr. Lutz Jänicke is the Product & Solution Security Officer of the Phoenix Contact-Group and is responsible for coordinating groupwide activities and processes. He is active in standardization committees and industry associations including the Plattform Industrie 4.0, where he is chair of the secure communication sub-working group. Before taking up the corporate role, Dr. Jänicke was CTO at Innominate Security Technologies AG (now Phoenix Contact Cyber Security GmbH), a provider of industrial security gateways.
References
1. Remote maintenance in industrial environments. Bonn, Federal office of information security, 2015.Search in Google Scholar
2. Working Paper “Secure Cross-Company Communication”. Berlin. Plattform Industrie 4.0, 2016.Search in Google Scholar
3. Information technology – Security Techniques – Information Security Management System. ISO/IEC 27000:2017.Search in Google Scholar
4. Security for industrial automation and control systems. IEC 62443.Search in Google Scholar
5. Autonomik für Industrie 4.0. Berlin. Bundesministerium für Wirtschaft und Energie (BMWi), 2016.Search in Google Scholar
6. Discussion Paper “Secure Communication for Industrie 4.0”. Berlin. Plattform Industrie 4.0, 2017.Search in Google Scholar
7. David, Nayler, et al. And Then There Were More: Secure Communication for More Than Two Parties. Proceedings of the 13th International Conference on emerging Networking Experiments and Technologies. 2017.10.1145/3143361.3143383Search in Google Scholar
8. OPC Unified Architectur. IEC 62541.Search in Google Scholar
9. Diskussionspapier “Sicherer Bezug von CAE-Daten”. Berlin. Plattform Industrie 4.0, 2018.Search in Google Scholar
10. Discussion Paper “Secure Implementation of OPC UA for operators, integrators and manufacturers”. Berlin. Plattform Industrie 4.0, 2018.Search in Google Scholar
11. Technical Overview: Secure Identities. Berlin. Plattform Industrie 4.0, 2016.Search in Google Scholar
© 2019 Walter de Gruyter GmbH, Berlin/Boston
Articles in the same Issue
- Frontmatter
- Editorial
- Editorial
- Forum
- Cyber security and Industry 4.0
- Survey
- Secure communication for Industrie 4.0
- Five ICS cybersecurity myths based on Kaspersky Lab ICS CERT experience
- Automated security testing for web applications on industrial automation and control systems
- Methods
- On the importance of cryptographic agility for industrial automation
- A lightweight key generation scheme for end-to-end data authentication in Industrial Control Systems
- Authorization in asset administration shells using OPC UA
Articles in the same Issue
- Frontmatter
- Editorial
- Editorial
- Forum
- Cyber security and Industry 4.0
- Survey
- Secure communication for Industrie 4.0
- Five ICS cybersecurity myths based on Kaspersky Lab ICS CERT experience
- Automated security testing for web applications on industrial automation and control systems
- Methods
- On the importance of cryptographic agility for industrial automation
- A lightweight key generation scheme for end-to-end data authentication in Industrial Control Systems
- Authorization in asset administration shells using OPC UA
