Security for Industrial Automation and Control Systems

The security of industrial automation and control systems becomes increasingly critical as different networks are connected and systems are integrated in a collaborative manufacturing environment. For industrial automation and control systems the potential impact of an attack may be more serious than for computer systems in general. Users of industrial automation and control systems need to pay correspondingly increased attention to these issues. Security measures aim at protecting the confidentiality, integrity, and availability of a computer system from being compromised through deliberate or accidental attacks. Similar to process and safety improvements, security improvement needs to be a continuous activity. This white paper provides background and a general overview of different elements of information system security, with specific emphasis on how it applies to industrial automation and process control. Different security measures that should be considered when an automation system is connected to external networks of different kinds are discussed, including connections to general purpose IS and corporate networks, remote connections, and wireless connections.