Safety
2CKA001473B5394
│6
2.4
Cyber security
Industry faces intensifying cyber security risks. In order to increase stability, safety and
robustness in its solutions, ABB has formally established cyber security robustness testing as
part of the product development process.
The following measures are prerequisite for the safe operation of your system. ABB accepts no
liability for non-observance.
Access control and limitation
The careful isolation of the system against unauthorized access is the basis for every protective
concept. Only authorized persons (fitter, caretaker, tenant) are allowed physical access to the
IP network or bus system and its components. This also includes the device described in the
instruction manual.
The best possible protection of the IP or network media (LAN/WLAN) and the transfer node
must be guaranteed already during planning. Sub-distributions with fieldbus devices must be
lockable or be in rooms to which only authorized persons have access.
Bus cabling
■
The ends of the bus cables must not be visible, i.e., they must not project out of walls or
channels, either inside or outside of the building.
■
Bus cables in outdoor areas or in areas with limited protection represent an increased safety
risk. The physical access should be made exceptionally difficult.
IP Network
The local network represents a sensitive component for secure communication. That is why
unauthorized access to the local network should be prevented. The normal security
mechanisms for IP networks are to be used, e.g.:
■
Secure encryption of wireless networks
■
Use of complex passwords and protection of these against unauthorized persons
■
Physical access to network interfaces (Ethernet interfaces) and network components
(router, switches) should only be possible in protected areas.
■
MAC filter (table with certified device addresses)
Connection to the Internet or the local IP network
To prevent improper use, no router ports from the Internet into the building network or home
network are to be opened to the Smart Edge device. A VPN tunnel is suitable for safe remote
control.
The stable and reliable function of the device also depends on the reliability of the local IP
network to which the server is connected. For this reason, additional network components are to
be used to repel the DoS attacks (denial of service) from the Internet. Such attacks can
overload the local IP network or the individual components and make them inaccessible.
