4
Industrial Security and Installation guidelines
4.1 Industrial security in information technology
This chapter can also be found as a guide
‘IIndustrial IT Security’
at
www.yaskawa.eu.com
The topic of data security and access protection has become increasingly important in the
industrial environment. The increased networking of entire industrial systems to the net-
work levels within the company together with the functions of remote maintenance have
all served to increase vulnerability. Hazards can arise from:
n
Internal manipulation such as technical errors, operating and program errors and
deliberate program or data manipulation.
n
External manipulation such as software viruses, worms and Trojans.
n
Human carelessness such as password phishing.
The most important precautions to prevent manipulation and loss of data security in the
industrial environment are:
n
Encrypting the data traffic by means of certificates.
n
Filtering and inspection of the traffic by means of VPN - "Virtual Private Networks".
n
Identification of the user by "Authentication" via save channels.
n
Segmenting in protected automation cells, so that only devices in the same group can
exchange data.
n
Deactivation of unnecessary hardware and software.
You can find more information about the measures on the following websites:
n
Federal Office for Information Technology
www.bsi.bund.de
n
Cybersecurity & Infrastructure Security Agency
us-cert.cisa.gov
n
VDI / VDE Society for Measurement and Automation Technology
www.vdi.de
Latest version
Hazards
Precautions
Further Information
HMI
Industrial Security and Installation guidelines
Industrial security in information technology
HB160 | TP-smart | H71-71A41-0 | en | 23-10
37
