Siemens SINAMICS Instruction sheet

Medium-voltage converter
SINAMICS
Industrial Security
Configuration Manual
08/2017
A5E36912609A
Introduction 1
Safety instructions 2
Industrial Security 3
General security measures 4
Security measures for
SINAMICS 5
Communication A
Service & Support B
References C

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of identifying risks and avoiding
potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in
this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
Document order number: A5E36912609A
Ⓟ 10/2017 Subject to change
Copyright © Siemens AG 2017.
All rights reserved

Table of contents
1 Introduction...................................................................................................................................................7
2Safety instructions........................................................................................................................................9
2.1 Note on Safety Integrated......................................................................................................10
3 Industrial Security.......................................................................................................................................11
3.1 Security information...............................................................................................................11
3.2 What is industrial security?....................................................................................................11
3.3 Why is Industrial Security so important?................................................................................12
3.3.1 Security measures in automation and drive technology.........................................................14
3.4 Security management............................................................................................................16
4 General security measures.........................................................................................................................19
4.1 Plant security..........................................................................................................................20
4.1.1 Physical protection of critical production areas......................................................................20
4.2 Network security.....................................................................................................................21
4.2.1 Network segmentation...........................................................................................................21
4.2.1.1 Separation between production and office networks.............................................................21
4.2.1.2 Network segmentation with SCALANCE S............................................................................22
4.3 System integrity......................................................................................................................26
4.3.1 System hardening..................................................................................................................26
4.3.1.1 Reduction of attack points......................................................................................................26
4.3.1.2 Virus scanner.........................................................................................................................28
4.3.2 Whitelisting.............................................................................................................................29
4.3.3 Patch management................................................................................................................29
5 Security measures for SINAMICS..............................................................................................................31
5.1 Network security.....................................................................................................................31
5.2 Write protection and know-how protection.............................................................................31
5.2.1 Write protection......................................................................................................................32
5.2.2 Know-how protection..............................................................................................................34
5.2.2.1 Overview................................................................................................................................34
5.2.2.2 Features of know-how protection...........................................................................................35
5.2.2.3 Configuring know-how protection...........................................................................................37
5.2.2.4 Loading know-how protected data to the file system.............................................................43
5.2.3 Overview of important parameters.........................................................................................47
5.3 Parameters: Access levels + password.................................................................................48
5.4 Using the memory card..........................................................................................................48
5.5 Communication services and used port numbers..................................................................49
5.6 Web server.............................................................................................................................52
5.6.1 Requirements and addressing...............................................................................................53
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 3

5.6.2 Configuring the Web server...................................................................................................54
5.6.2.1 Basic configuration.................................................................................................................54
5.6.2.2 Assigning a password............................................................................................................56
5.6.3 Access protection and rights..................................................................................................59
5.6.3.1 SINAMICS access protection.................................................................................................59
5.6.3.2 Web server access protection................................................................................................59
5.6.3.3 Access protection for parameter lists in the web server.........................................................61
5.6.4 Starting the Web server.........................................................................................................62
5.6.5 Displaying device information................................................................................................64
5.6.6 Displaying diagnostic functions..............................................................................................65
5.6.6.1 Status and operating display of the drive object....................................................................65
5.6.6.2 Loading a multiple trace.........................................................................................................66
5.6.7 Displaying messages.............................................................................................................67
5.6.7.1 Displaying the diagnostic buffer.............................................................................................67
5.6.7.2 Displaying faults and alarms..................................................................................................68
5.6.8 Displaying and changing drive parameters............................................................................68
5.6.8.1 Creating a parameter list........................................................................................................68
5.6.8.2 Deleting a parameter list........................................................................................................70
5.6.8.3 Displaying and changing drive parameters............................................................................72
5.6.9 Certificates for the secure data transfer.................................................................................73
5.6.9.1 Using the standard configuration of the certificate.................................................................75
5.6.9.2 Using self-created certificates................................................................................................75
5.6.9.3 Generating your own certificates............................................................................................76
5.6.10 Messages and parameters.....................................................................................................77
5.7 Information about individual interfaces...................................................................................77
5.8 SINAMICS Startdrive and Starter...........................................................................................79
5.8.1 SINAMICS Startdrive.............................................................................................................79
5.8.2 SINAMICS STARTER............................................................................................................79
5.9 SINAMICS Drive Control Chart (DCC)...................................................................................80
5.9.1 Use write and know-how protection.......................................................................................82
A Communication...........................................................................................................................................83
A.1 Communication......................................................................................................................83
A.1.1 Communication according to PROFIdrive..............................................................................83
A.1.1.1 PROFIdrive application classes.............................................................................................85
A.1.1.2 Cyclic communication............................................................................................................86
A.1.1.3 Parallel operation of communication interfaces.....................................................................90
A.1.1.4 Acyclic communication...........................................................................................................93
A.1.1.5 Diagnostics channels...........................................................................................................105
A.1.2 Communication via PROFIBUS DP.....................................................................................113
A.1.2.1 General information about PROFIBUS................................................................................113
A.1.2.2 Commissioning PROFIBUS.................................................................................................117
A.1.2.3 Slave-to-slave communication.............................................................................................124
A.1.2.4 Messages via diagnostic channels_PROFIBUS..................................................................135
A.1.3 Communication via PROFINET IO.......................................................................................137
A.1.3.1 General information about PROFINET IO............................................................................137
A.1.3.2 RT classes for PROFINET IO..............................................................................................147
A.1.3.3 PROFINET GSDML.............................................................................................................152
A.1.3.4 Communication with CBE20................................................................................................153
A.1.3.5 Communication via PROFINET Gate...................................................................................154
A.1.3.6 PROFINET with 2 controllers...............................................................................................158
Table of contents
Industrial Security
4Configuration Manual, 08/2017, A5E36912609A

A.1.3.7 PROFINET media redundancy............................................................................................169
A.1.3.8 PROFINET system redundancy...........................................................................................169
A.1.3.9 Support of I&M data sets 1...4..............................................................................................173
A.1.4 Communication via MODBUS TCP......................................................................................175
A.1.4.1 Overview..............................................................................................................................175
A.1.4.2 Configuring Modbus TCP via interface X150.......................................................................177
A.1.4.3 Configuring Modbus TCP via interface X1400.....................................................................178
A.1.4.4 Mapping tables.....................................................................................................................179
A.1.4.5 Write and read access using function codes........................................................................181
A.1.4.6 Communication via data set 47............................................................................................184
A.1.4.7 Communication procedure...................................................................................................187
A.1.4.8 Messages and parameters...................................................................................................188
A.1.5 Communication via EtherNet/IP...........................................................................................189
A.1.5.1 Overview..............................................................................................................................189
A.1.5.2 Connect drive device to Ethernet/IP.....................................................................................189
A.1.5.3 Requirements for communication........................................................................................191
A.1.5.4 Configuring communication..................................................................................................191
A.1.5.5 Supported objects................................................................................................................192
A.1.5.6 Integrate the drive device into the Ethernet network via DHCP...........................................202
A.1.5.7 Messages and parameters...................................................................................................202
A.1.6 Communication via SINAMICS Link.....................................................................................203
A.1.6.1 Basic principles of SINAMICS Link......................................................................................203
A.1.6.2 Topology..............................................................................................................................206
A.1.6.3 Configuring and commissioning...........................................................................................207
A.1.6.4 Example...............................................................................................................................211
A.1.6.5 Communication failure when booting or in cyclic operation.................................................214
A.1.6.6 Examples: Transmission times for SINAMICS Link.............................................................214
A.1.6.7 Function diagrams and parameters.....................................................................................214
A.1.7 Communication services and used port numbers................................................................215
A.1.8 Time synchronization between the control and converter....................................................218
A.1.8.1 Settings................................................................................................................................220
A.1.8.2 Messages and parameters...................................................................................................221
B Service & Support.....................................................................................................................................223
C References...............................................................................................................................................225
C.1 Additional information...........................................................................................................225
Glossary...................................................................................................................................................227
Index.........................................................................................................................................................233
Table of contents
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 5

Table of contents
Industrial Security
6Configuration Manual, 08/2017, A5E36912609A

Introduction 1
The "Industrial Security" documentation contains recommendations and information for the
planning and design of secure systems or plants. The documentation serves as a reference
manual and guideline.
This documentation is strictly of a recommendatory nature. The documentation supports
customers in safely operating their controllers or plants. You, as operator, are responsible for
implementing the security recommendations.
The documentation is particularly geared toward:
● Planners and project engineers
● IT departments of end users and OEMs
The following knowledge is a prerequisite for implementing the described security concepts:
● Administration of the IT technologies familiar from the office environment
● Configuration of the SINAMICS products used
● Configuration of the products of third-party manufacturers used
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 7

Introduction
Industrial Security
8Configuration Manual, 08/2017, A5E36912609A

Safety instructions 2
WARNING
Incorrect or changed parameterization
As a result of incorrect or changed parameterization, machines can malfunction, which in turn
can lead to injuries or death.
● Protect the parameterization (parameter assignments) against unauthorized access.
● Respond to possible malfunctions by applying suitable measures (e.g. EMERGENCY
STOP or EMERGENCY OFF).
WARNING
Danger to life if the safety instructions and residual risks are not observed
If the safety instructions and residual risks in the associated hardware documentation are not
observed, accidents involving severe injuries or death can occur.
● Observe the safety instructions given in the hardware documentation.
● Consider the residual risks for the risk evaluation.
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 9

2.1 Note on Safety Integrated
To actually reduce the risk for machines and plants through the use of Safety Integrated
functions, working with Safety Integrated functions requires special care for all SINAMICS
devices that have it.
DANGER
Risk minimization through Safety Integrated
Safety Integrated can be used to minimize the level of risk associated with machines and
plants.
Machines and plants can only be operated safely in conjunction with Safety Integrated,
however, if the machine manufacturer adheres to the following rules:
● The machine builder (OEM) precisely knows and observes the technical user
documentation, including the documented boundary conditions, safety information and
residual risks.
● The machine or plant is carefully set up and configured and a thorough acceptance test
must then be performed by qualified personnel and the results documented.
● All of the measures required in accordance with the machine/plant risk analysis are
implemented and validated by the programmed and configured Safety Integrated functions
or by other means.
The use of Safety Integrated does not replace the machine/plant risk assessment carried out
by the machine manufacturer as required by the EC machinery directive.
In addition to using Safety Integrated functions, further risk reduction measures must be
implemented.
Safety instructions
2.1 Note on Safety Integrated
Industrial Security
10 Configuration Manual, 08/2017, A5E36912609A

Industrial Security 3
3.1 Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines, and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and
networks. Systems, machines and components should only be connected to the enterprise
network or the internet if and to the extent necessary and with appropriate security measures
(e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For more information about industrial security, please visit:
http://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends to apply product updates as soon as available and to always
use the latest product versions. Use of product versions that are no longer supported, and
failure to apply latest updates may increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
http://www.siemens.com/industrialsecurity.
3.2 What is industrial security?
Definition of industrial security
Generally, industrial security is understood to be all of the measures for protecting against the
following:
● Loss of confidentiality due to unauthorized access to data
● Loss of integrity due to data manipulation
● Loss of availability (e.g. due to destruction of data or Denial-of-Service (DoS))
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 11

Objectives of industrial security
The objectives of industrial security encompass:
● Fault-free operation and guaranteeing of availability of industrial plants and production
processes
● Preventing hazards to people and production
● Protection of industrial communication from espionage and manipulation
● Protection of industrial automation systems and components from unauthorized access
and loss of data
● Practicable and cost-effective concept for securing existing systems and devices that do
not have their own security functions
● Utilization of existing, open, and proven industrial security standards
● Fulfillment of legal requirements
An optimized and adapted security concept applies for automation and drive technology. The
security measures must not hamper or endanger production.
3.3 Why is Industrial Security so important?
Overview
There are many new trends which affect industrial security:
● Cloud computing in general
The number of network connections across the world is constantly increasing. This enables
innovations such as cloud computing and the applications that go hand in hand with it. In
conjunction with cloud computing, there has been a massive increase in the number of
mobile devices, such as cell phones and tablet PCs.
● Wireless technology
On the other hand, the increasing use of mobile devices has only become possible thanks
to the ubiquitous availability of mobile networks. Wireless LAN is also becoming
increasingly available.
● Worldwide remote access to plants, machines and mobile applications
● The "Internet of things"
Millions of electronic devices are becoming network-capable and are communicating via
the Internet, such as onboard computers in cars, which transmit warranty information to
dealers, or water meter sensors that transmit water consumption data to municipal water
suppliers via radio.
However, in order for everything from cloud computing to sensors to function disturbance-free,
you require a reliable network infrastructure and applications that are well protected against
attacks from malware and hackers.
Industrial Security
3.3 Why is Industrial Security so important?
Industrial Security
12 Configuration Manual, 08/2017, A5E36912609A

Possible security holes or weak points
The security chain of a company is only as strong as its weakest link. Security holes can exist
at numerous points. The following list gives only a few examples:
● Employees / external companies
● Production plants
● Network infrastructure
● Data centers / PC workstations
● Laptops/tablets
● Printers
● Smartphones/smartwatches
● Mobile data storage media
For this reason, a holistic approach is required to deal with the issue of security. Coordinated
guidelines and regulations are required that cover all areas: Devices, systems, processes and
employees.
The topic of data security and access protection (security) is becoming more and more
important in industrial environments. The following technologies results in higher requirements
placed on protecting and securing industrial plants and systems:
● The ongoing networking of complete industrial plants and systems
● The vertical integration and networking of various company levels
● New techniques, e.g. remote maintenance and/or remote access
The threats are diverse and the consequences are far-reaching:
Possible threats:
Potential threats come from the industry environment and involve the topic of confidentiality,
integrity and availability. Examples of threats include the following:
● Espionage of data, recipes, etc.
● Sabotage of production plants
● System stoppage, e.g. due to virus infection and malware
● Manipulation of data or application software
● Unauthorized use of system functions
Possible effects of a security incident
● Loss of intellectual property
● Loss of production or reduced product quality
● Negative company image and economic damage
● Catastrophic environmental influences
● Danger to people and machines
Industrial Security
3.3 Why is Industrial Security so important?
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 13

3.3.1 Security measures in automation and drive technology
Siemens automation and drive technology concerns itself with security aspects at the following
levels:
●Application security
Refers to products and functions that take into consideration the needs of Industrial Security
in the field of automation. This involves particular consideration of the application and task
at hand, as well as the people performing the actions in an automated plant. This allows
industrial security to be easily implemented in production processes.
●Security support
Support from specialists with network and special industry know-how in the analysis,
planning, implementation, testing, and optimizing of Industrial Security. These services lead
to the highest possible level of industrial security and operating capacity of the production
plant.
Siemens offers comprehensive customer support based on the "Implement Security"
service: With this service you can implement protective measures to increase the security
level of plants and production facilities. You can find more information about the entire
"Implement Security" portfolio on the Internet (https://www.industry.siemens.com/services/
global/en/portfolio/plant-data-services/industrial_security/Pages/plant-security-
services.aspx).
Security measures
With increasing digitalization, comprehensive security in the automation system is becoming
ever more important. For this reason, industrial security is a core element of every product that
can be networked.
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers by integrating security into its products.
● Product Lifecycle Management (PLM) process
All of the measures involving automation and drive technology are stored in the PLM
process. The PLM is certified by the German Technical Inspectorate based on
IEC 62443-4-1.
● Threat and Risk Analyses (TRAs)
Analytically potential attack threats are detected and evaluated using TRAs. Identified
critical threats are implemented in the product as necessary basic functions, based on the
motto "Security by Design".
● Code analyses
Siemens regularly performs code analyses in order to identify and correct possible errors
at an early stage during the formal check.
Industrial Security
3.3 Why is Industrial Security so important?
Industrial Security
14 Configuration Manual, 08/2017, A5E36912609A

● Measures for ensuring integrity
To indicate any changes to the integrity, Siemens has implemented measures to safeguard
integrity in its products and manufacturing process.
● Hardening
Siemens constantly checks the measures for hardening:
– Operating systems are configured in such a way that points of attack, e.g. via ports of
unneeded services, are minimized.
– Siemens tests its products to detect weak points at an early stage.
– Siemens offers a specific hotfix/patch management.
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers by securing the development infrastructure and supply chain.
● Siemens ProductCert (https://www.siemens.com/cert/en/cert-security-advisories.htm)
(Cyber Emergency Readiness Team)
The Cyber Emergency Readiness Team is the central department for security-related
incidents in the Siemens product and solution environment. Siemens ProductCERT
supports development work with consulting and other services. ProductCERT provides
information about current threats and vulnerabilities as well as the appropriate
countermeasures.
● Industrial Security
Industrial security is a dynamic and complex subject that requires continuous monitoring
and adaptation of new security measures. Information on how Siemens protects its products
and solutions against cyber attacks and how industry profits from the competence of
Siemens can be found on the Internet (https://www.industry.siemens.com/topics/global/en/
industrial-security/always-active/Pages/Default.aspx).
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers through direct support of integrators and operators. For this purpose, Siemens
provides patches, security components and the appropriate services.
● Security Information and Event Management-System (SIEM)
SIEMENS offers monitoring through a SIEM system to monitor the residual risk. SIEM has
become an established term in IT security. Such systems are able to identify and evaluate
security-relevant events and notify the administrator.
Siemens Industrial Holistic Security Concept™
Siemens places great emphasis on protecting the integrity and guaranteeing the confidentiality
of the processed data for its own products. Intellectual property and know-how of the Siemens
products are also in focus.
To achieve this, the Siemens Industrial Holistic Security Concept (SI HSC) is applied which
protects development departments and production plants. Multi-level security systems and
basic security improvements of the IT infrastructure are implemented. In parallel, process
improvements have been introduced and training in security awareness provided in the
development and production. These measures are continuously performed by Siemens and
clearly demonstrated by the security levels reached.
SI HSC also benefits the customers who Siemens has selected as partners for their industrial
solutions, or who want to orientate themselves on the concept. Siemens suppliers are also
Industrial Security
3.3 Why is Industrial Security so important?
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 15

considered with regard to security so that Siemens already applies the same security standards
when purchasing as for the manufacture of its own products.
0RQLWRULQJRIWKHUHVLGXDOULVNLQRUGHUWRLPSURYHWKHVHFXULW\FRQFHSWZKHQUHTXLUHGHJZKHQQHZWKUHDWVDSSHDU6HOHFWLRQDQGLPSOHPHQWDWLRQRIVXLWDEOHPHDVXUHVLQRUGHUWRIXOILOOWKHVWLSXODWHGUHTXLUHPHQWVHJFHOOSURWHFWLRQFRQFHSW6HFXULW\UHTXLUHPHQWVPXVWEHIXOILOOHGE\WKH,7LQIUDVWUXFWXUHDQG,7SURFHVVHVEDVHGRQLQWHUQDWLRQDOVWDQGDUGV,(&DQG,626LJQLILFDQFHRINQRZKRZSURWHFWLRQDQGSURGXFWLQWHJULW\IRUWKHFRPSDQ\3URGXFWVDQGEXVLQHVVDUHDVWDNHQLQWRDFFRXQWLQWKH+ROLVWLF6HFXULW\&RQFHSW0RQLWRULQJRI5HVLGXDO5LVN3URWHFWLRQ&RQFHSW7DUJHW3URWHFWLRQ/HYHO%XVLQHVV,PSDFW$VVHVVPHQW6FRSH
Figure 3-1 SI HSC security management process
Standards and regulations
Siemens complies with the valid standards and regulations in the industrial security area
throughout the entire development process:
● ISO 2700X: Management of information security risks
● IEC 62443: IT security for industrial higher-level control systems – network and system
protection
3.4 Security management
The security management process as a basis
Protect your system and your company. Security management according to IEC 62443 and
ISO 27001 forms the basis for the successful implementation of Industrial Security.
The security management process is shown in the following:
Industrial Security
3.4 Security management
Industrial Security
16 Configuration Manual, 08/2017, A5E36912609A

5LVNDQDO\VLV*XLGHOLQHVRUJDQL]DWLRQDOPHDVXUHV7HFKQLFDOPHDVXUHV9DOLGDWLRQDQGLPSURYHPHQW
Figure 3-2 Security management process
1. Carry out a risk analysis. Determine all possible risks and define countermeasures for
reducing the risk to an acceptable level. In detail, a risk analysis encompasses the following
steps:
– Identification of threatened objects
– Analysis of value and potential for damage
– Threat and weak point analysis
– Identification of existing security measures
– Risk evaluation
2. Define guidelines and introduce coordinated, organizational measures. To this end, the
awareness of the importance of industrial security must be borne by all levels of the
company. In addition, define guidelines and processes in order to achieve a uniform
procedure and to support compliance with the defined Industrial Security concept.
3. Introduce coordinated technical measures. You can find a list of general measures that
help to protect your plant against threats in Section General security measures (Page 19).
You can find measures recommended for SINAMICS environments in chapter Security
measures for SINAMICS (Page 31).
4. A security audit must ensure that all of the measures have been implemented and that they
have also eliminated or reduced the identified risks.
Note
Continuous process
Due to constantly changing security threats, this process must be continuously repeated
in order to guarantee the security of your plant. For this reason, the security management
process must be seen as a continuous process.
Industrial Security
3.4 Security management
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 17

Industrial Security
3.4 Security management
Industrial Security
18 Configuration Manual, 08/2017, A5E36912609A

General security measures 4
The following section shows the general security measures you can take in order to protect
your system from threats. All of the measures are recommended.
Additional specific security measures for SINAMICS products can be found in chapter Security
measures for SINAMICS (Page 31).
To protect industrial plants and systems comprehensively against cyber attacks, measures
must be applied simultaneously at all levels. From the operational up to the field level – from
access control to copy protection. For this purpose, we use "Defense in Depth" as a general
protection concept, according to the recommendations of ISA99 / IEC 62443, the leading
standard for security in industrial automation.
6HFXULW\ULVNVGHPDQGDFWLRQ3K\VLFDODFFHVVSURWHFWLRQSURFHVVHVDQGVHFXULW\VHUYLFHJXLGHOLQHVIRUWKHSURWHFWLRQRISURGXFWLRQSODQWV3ODQWVHFXULW\&HOOSURWHFWLRQSHULPHWHUQHWZRUNILUHZDOOVDQG9311HWZRUNVHFXULW\,QWHJUDWHGDFFHVVSURWHFWLRQLQWKHDXWRPDWLRQ6\VWHPLQWHJULW\6\VWHPKDUGHQLQJDXWKHQWLFDWLRQDQGXVHUDGPLQLVWUDWLRQSDWFKPDQDJHPHQWGHWHFWLRQRIDWWDFNV'HIHQVHLQGHSWK
Figure 4-1 Defense in depth strategy
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 19

●Plant security
Plant security represents the outermost protective ring. Plant security includes
comprehensive physical security measures, e.g. entry checks, which should be closely
coordinated with protective measures for IT security.
●Network security
The measures, grouped under the keyword "Network security", form the core of the
protective measures. This refers to the segmentation of the plant network with limited and
secure communication between subnetworks ("secure islands") and the interface check
with the use of firewalls.
●System integrity
"System integrity" represents the combination two major measures. PC-based systems and
the control level must be protected against attacks. Steps include the following measures:
– User authentication for machine or plant operators with individual authorization levels
– Integrated access protection mechanisms in the automation components to prevent
unauthorized changes via the engineering system or during maintenance
– The use of antivirus and whitelisting software to protect PC systems against malware
– Maintenance and update processes to keep the automation systems up-to-date
(e.g. patch management, firmware updates, etc.)
4.1 Plant security
Unauthorized persons may be able to enter the production site/building and damage or alter
production equipment as a result of gaps in a company's physical security. Confidential
information can also be lost. This can be prevented if both the company's site and the
production areas are protected accordingly.
4.1.1 Physical protection of critical production areas
Company security
The company's physical security can be ensured via the following measures:
● Closed off and monitored company premises
● Entry control, keys / card readers and/or security personnel
● Escorting of external personnel by company employees
● Security processes in the company are taught and followed by all employees
General security measures
4.1 Plant security
Industrial Security
20 Configuration Manual, 08/2017, A5E36912609A