Japan Computer Emergency Response Team Coordination Center

電子署名者 : Japan Computer Emergency Response Team Coordination Center
DN : c=JP, st=Tokyo, l=Chiyoda-ku, email=office@jpcert.or.jp, o=Japan Computer Emergency
Response Team Coordination Center, cn=Japan Computer Emergency Response TeamCoordination Center
日付 : 2011.02.28 18:31:52 +09'00'

Industrial Security
An Ongoing Task

© Siemens AG 2011. All Rights Reserved.

Industrial Security

 Industrial Security History The Building Blocks of Industrial Security© Siemens AG 2011. All Rights Reserved.

The Changing Security Situation –from Fieldbuses to Industrial Ethernet
Benefits of Industrial Ethernet Openness (e.g. for integration of wireless communication systems)
 Internet connectivity (e.g. for remote access) Higher number of nodes (theoretically billions within an IP subnet)
 Higher data rates (100/ 1,000/ 10,000 Mbit/s)
Issues to consider
 Vulnerability through openness Threats from the Internet Address conflicts if not carefully administrated
 Necessity to plan and structure networks
Industrial Ethernet means great benefit to the industry,
but also requires new security standards
Page 3Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Office versus Industrial Security
Office IT

Production IT

Objectives and requirements
 Security of data Control administrative
processes
 Prevent espionage

Objectives and requirements
 Prevent loss of production (availability!) Product quality
 Safety: prevent hazards
 Security: prevent
sabotage

Features A lot of connections via the internet
 Regular patches possible
 Use of standard SW and HW
 Examples: PC, Microsoft, applications,internetFeatures
 Data connections to office IT / internet
must be subject to clear security
management SW update strictly limited
 Specific SW for automation and controlof production processes Examples: SCADA systems, S7 control

Page 4Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Siemens Industrial Security History
 1995: Introduction of Knowhow Protect feature: encryption of S7 program blocks
 Copy Protection: program blocks bound to HW serial number 2004: Start of cooperation with the Swiss CERN institute to identify any
vulnerability and to improve the robustness of components against hacking etc.
 2005: Introduction of the Cell Protection Concept with the SCALANCE S
security modules
 2007: IP Hardening of Ethernet-based SIMATIC components to improve thecommunication robustness of Ethernet
 2010: Improvement of the Knowhow Protect feature and the Copy Protection
mechanism with STEP 7 V5.5
Page 5Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Industrial Security

 Industrial Security History The Building Blocks of Industrial Security© Siemens AG 2011. All Rights Reserved.

Security is an Ongoing TaskOrganization

Technical Security

Processes

Standardization/Regulations
e.g. IEC standards

Industrial Security must be addressed at various different levels
Page 7

Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Technical Industrial Security Featuresin Production Systems

Production

NetworkOffice

Cell Protection Concept
according to thePROFINET User Association

Industrial security consists of processes, products and measures to prevent dataabuse and intrusion by third parties into office environment & production processes
Page 8Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

The Cell Protection Concept –Secure LAN and Secure Remote Access

Page 9Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Siemens Industrial Security Services
Covering All Phases of the Plant Lifecycle
Security services from
Siemens Industry
 Security awarenesstraining and workshops
 Vulnerability assessments
 Consulting on securearchitectures and concepts
 Implementation services
 PCS 7 Firewall Application whitelisting

Page 10Feb. 10, 2011

© Siemens AG 2011. All Rights Reserved.
J. Koch, Marketing Manager Industrial Communication
Industry Sector

Thank you for your attention!

Jochen Koch
Marketing Manager Industrial Communication
I IA SC IC PRM 4
Gleiwitzer Straße 555
90475 Nuremberg
Phone: +49 911 895-5305
Fax: +49 911 895-155305
Cellular: +49 172 8337452
E-Mail: jochen.koch@siemens.com© Siemens AG 2011. All Rights Reserved.