Embedded plug-in devices to secure industrial network communications

Abstract

With Ethernet as an ubiquitous technology also emerging in industrial networks, security is becoming one of the most important aspects. Whereas IT-networks together with their security features in the office domain are subject of a dynamic change, networks in the industrial environment have a long operational time and therefore are more vulnerable to unauthorized access due to outdated hard-and software components. ITthreats such as Stuxnet are targeted to these areas and in the case of a failure of, e.g., a critical infrastructure this can directly harm the public security. Hence, in this paper a concept of an embedded plug-in device is proposed that secures the authentication and integrity of communication flows between two communicating network parties. A key focus of the development is the message authentication mechanism without neglecting the safety aspect imperative for industrial networks.

Assessment simulation model for uncoupled message authentication

“…Embedded plug-in devices inserted in the network provide authenticity and integrity for transmitted traffic. The technology has been introduced in [4] and was further developed in [5]. A simple network scenario is shown in figure 1 in which two end devices (A and B) are communicating with each other.…”

“…This prevents failures through the MAC generation and does not delay the traffic. In [4] an embedded plug-in device is described which secures the data transmission through this mechanism without influencing the data flow using uncoupled MACs.…”