IT security extensions for PROFINET The impact of vertical and horizontal integration in the context of Industry 4.0 requires new concepts for the security of industrial Ethernet protocols. The defense in depth concept, basing on the combination of several measures, especially separation and segmentation, needs to be complimented by integrated protection measures for industrial realtime protocols. To cover this challenge, existing protocols need to be equipped with additional functionality to ensure the integrity and availability of the network communication, even in environments, where possible attackers can be present. In order to show a possible way to upgrade an existing protocol, this paper describes a security concept for the industrial Ethernet protocol PROFINET.

Configuration of Application Layer Protocols within Realtime I4.0 Components Within the context of Industry 4.0, future production systems are expected to support mass customization up to lot size one. In order to realize the individual production processes, a changeable and consistent integration of assets from different manufacturers is required. Therefore, the concept of I4.0 components was developed. Every I4.0 component provides a socalled asset administration shell, i.e. a standardized virtual representation of its capabilities. This paper focuses on realtime I4.0 components that require a deterministic communication with bounded lowlatency inbetween. In contrast to nonrealtime I4.0 components, Ethernet (IEEE 802.3) is enhanced by the new realtime communication technology TimeSensitive Networking (TSN, IEEE 802.1). The basic configuration of TSN connections within the asset administration shell was already addressed by previous work. In this work, we present the configuration of application layer protocols using the example of OPC UA PublishSubscribe (PubSub). More precisely, we outline the underlying concept and define additional submodels for the asset administration shell of realtime I4.0 components. Finally, we discuss the advantages of the presented approach in terms of changeability.