IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place...
Transcript of IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place...
![Page 1: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/1.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 –PROTECTION OF PRODUCTION DATA
IUNOGermany’s National reference project for IT‐Security in Industrie 4.0
![Page 2: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/2.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
AGENDA
Fraunhofer SIT
Industrie 4.0
State‐of‐the‐art
IUNO – BMWI Project
Research & Solutions
Expertise & Competences
![Page 3: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/3.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY
![Page 4: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/4.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY
![Page 5: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/5.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY
Prof. Dr. Michael Backes
Center for IT‐Security, Privacy and Accountability (CISPA)
Kompetenzzentrum für angewandte Sicherheitstechnologie
Center for Research in Security and Privacy
Prof. Dr. Michael WaidnerProf. Dr. Jörn Müller‐Quade
![Page 6: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/6.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
Idea
Order
Development
Realisation
Provision
Maintenance
Recycling
![Page 7: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/7.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
![Page 8: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/8.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
The Three Layers of I4.0
CommunicationIntegration InformationIdentity
Identity
Place
PathCondtion
History
CloudBig Data
CPS
Collection
Construktion
Orchestration
Organisation
Operation
Machine 2020 Projekt, http://maschine2020.com/
![Page 9: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/9.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
Series 1 Product
Competitive Cost Models
On Customer Demand
Optimized Co2 Footprint
Agile Market‐Respond
Ergonomic Use
Technology Oriented
Individual Unique Product
![Page 10: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/10.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
IT‐Security for Industrie 4.0
![Page 11: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/11.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
Relevant
German Steal MillMassive damage Manipulation of control‐systems
Bitkom StudyStudy over 2 year duration51% victims of industrial espionage 51 MEUR damage p.a.52% MA
All production sites equipped with industrial firewalling, anti‐virus systems, etc.
IT‐Security for Industrie 4.0
![Page 12: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/12.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
INS2014 / ENISA-Study Protecting Industrial Control Systems, 2011 – European IT-Security Maturity
IT‐Security for Industrie 4.0
![Page 13: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/13.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
• Executive Summary (40 Pages)• Summary of all significant results • Matrix of the most important recommendations
• Full Document (254 Pages)• Management Summary• Detailed analysis of use cases • Reference model• Comprehensive matrix of all recommendation
BMWI‐Study „IT‐Security for Industrie 4.0“ Production, Products, Services of Tomorrow as a part of globalised value chains
![Page 14: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/14.jpg)
IUNONational Reference ProjektIT-Security for Industrie 4.0
Dr. Thorsten HenkelFraunhofer SIT - Industrial Security SolutionsDarmstadt, 15.02.2016
![Page 15: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/15.jpg)
IUNO combines the German expertise inIT-Security and Industrie 4.0
Software Innovations GmbH
![Page 16: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/16.jpg)
Use Cases
National Reference Implementation
Project‐ & Knowledge Management
Advisory Board (BSI, Industry, Research, Associations)
Request Analysis
Models and Specification
Tool Box
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
![Page 17: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/17.jpg)
IUNO develops IT‐Security for Industrie 4.0
Basics MethodologyDevelopment
Industrial Usage
Security by Design forIndustrie 4.0
Secure Framework
IT‐Security‐Reference Architecture
Hardware‐orientedSecurity
Encryption for I4.0 Architectures
Evaluation of Methods
Feedback of Results
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
![Page 18: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/18.jpg)
Industrial Usage
Evaluation of Methods
Feedback of Results
Solutions
Digital Identities for Productions Systems
Pirate Protection
Secure Patch‐Management of Industrial Production Sites
Secure Autonomous Configuration of CPPS
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
IUNO develops IT‐Security for Industrie 4.0
![Page 19: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/19.jpg)
Industrial Usage
Evaluation of Methods
Feedback of Results
Solutions
Product‐oriented Data Usage Control
Authentication in Real Time Environments
Secure Transmission
Digital Rights Management Production
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
IUNO develops IT‐Security for Industrie 4.0
![Page 20: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/20.jpg)
Industrial Usage
Evaluation of Methods
Feedback of Results
Solutions
Identity Management and Remote Control
Production‐Public Key Infrastructure
Secure Ad‐Hoc Networks of CPS
Trusted Computing Standards for
Embedded Systems
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
IUNO develops IT‐Security for Industrie 4.0
![Page 21: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/21.jpg)
Industrial Usage
Evaluation of Methods
Feedback of Results
Solutions
Trust Management & Boundaries for I4.0
Secure Hardware for Production Systems
Anomaly Notification in Production Systems
Secure Usage of mobile Systems and Data Storages
Individual Production
Technology Data – Market Place
Web‐based Remote Control
Visual Security‐Dashboard
Secure Processes
Secure Data
Secure Services
Secure Interaction
IUNO develops IT‐Security for Industrie 4.0
![Page 22: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/22.jpg)
IT‐Security for Industrie 4.0Hannover Fair 2015 – Industrial‐Rights‐Management Prototype
![Page 23: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/23.jpg)
IT‐Security for Industrie 4.0Hannover Fair 2015 – Industrial‐Rights‐Management Prototype
Deployment of a PKI Infra structure Encryption on CAD premise site
Decryption on printer site
Limitation of printed objects
Printing on dedicated printers
Full data and IP control
![Page 24: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/24.jpg)
IT‐Security for Industrie 4.0German IT‐Summit 2015 – Berlin TPM Trusted Core Network Prototype
![Page 25: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/25.jpg)
Distributed Health‐Checks inIndustrial Networks Peer‐to‐Peer mutual attestation
Distributed Security‐Checks
Early Warning System
IT‐Security for Industrie 4.0
![Page 26: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/26.jpg)
IT‐Security for Industrie 4.0IUNO – Pirate & Machine Integrity Protection
![Page 27: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/27.jpg)
IT‐Security for Industrie 4.0IUNO – Pirate & Machine Integrity Protection
Integrity Check of Industrial Production Systems
All Components have to prove their authenticity
Provision of cryptographic Identities for all compartments of a machine
Usage of BSI‐certified cryptographic algorithms
![Page 28: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/28.jpg)
IT‐Security for Industrie 4.0IUNO – Production Line Information Management Approach
![Page 29: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/29.jpg)
IT‐Security for Industrie 4.0
Continuously tracking and tracing Collection of field bus data
Pattern analysis and evaluation
Identification of IT‐Security Issues
Localisation of problems
Planned as a Cloud Service
IUNO – Production Line Information Management Approach
![Page 30: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/30.jpg)
IT‐Security for Industrie 4.0IUNO – Remote Maintenance / Managed Machine Service
![Page 31: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/31.jpg)
IT‐Security for Industrie 4.0IUNO – Remote Maintenance / Managed Machine Service
![Page 32: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/32.jpg)
IT‐Security for Industrie 4.0IUNO – Technology Data Market Place
Quelle: H-P Bock, Trumpf
PurchaserOrder
OperatorCutting Grinding Bending Welding
Raw material supplierPlate Pipe Operating Tools/
supplies instruments
Machine manufacturer
Technology data
Marketplace
Technology data
Further participantsin the market
Technology data
Technology data
Delivery incl. Basic amount oftechnology data(singular)
![Page 33: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/33.jpg)
IT‐Security for Industrie 4.0IUNO – Technology Data Market Place
Quelle: H-P Bock, Trumpf
PurchaserOrder
OperatorCutting Grinding Bending Welding
Raw material supplierPlate Pipe Operating Tools/
supplies instruments
Machine manufacturer
Technology data
Marketplace
Technology data
Further participantsin the market
Technology data
Technology data
Delivery incl. Basic amount oftechnology data(singular)
Machine operator Marketplace operator
![Page 34: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/34.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
IT‐Security Protection Goals
Data‐ Confidentiality
Data‐ Authenticity
Data‐ Integrity
Data‐ Availability
![Page 35: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/35.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
![Page 36: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/36.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
![Page 37: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/37.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development – Microsoft SDL
![Page 38: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/38.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development ‐ TRIKE
![Page 39: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/39.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development ‐ CORAS
![Page 40: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/40.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development – Model Based Approaches
![Page 41: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/41.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development – Catalogue Based Approaches
![Page 42: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/42.jpg)
IT‐Security for Industrie 4.0Empiric Evaluation
3 Analysists (1,3,8 years experience)
Effort 1 Day/Project
Over 30 Threats / Analyst
More than 70 Threats
Intersection 2
![Page 43: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/43.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
Method
Criteria Definition of Models
Usability Abstraction
Capability
Aggregation
Capability
Re-Usability Tool Support Formal (F) /
Open (O)
Integration
Capability
Trike + + n/a n/a + F
Attack
Trees n/a n/a n/a n/a n/a n/a n/a
CORAS o o n/a - + F/O +
PASTA n/a n/a n/a n/a n/a n/a n/a
MoRA n/a n/a n/a n/a n/a n/a n/a
SecureUM
L
n/a n/a n/a n/a n/a n/a n/a
UMLsec n/a n/a n/a n/a n/a n/a n/a
Misuse
Cases n/a n/a n/a n/a n/a n/a n/a
SDL n/a n/a n/a n/a n/a n/a n/a
VDI 2182 n/a n/a n/a n/a n/a n/a n/a
ISO/IEC
62443
n/a n/a n/a n/a n/a n/a n/a
CC n/a n/a n/a n/a n/a n/a n/a
FMEA n/a n/a n/a n/a n/a n/a n/a
![Page 44: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/44.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
![Page 45: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/45.jpg)
IT‐Security for Industrie 4.0IUNO – Industrial Security Policy Development
IUNO Three Step Threat Modeling Approach Information Collection,
Identification of components, technical functions, specifications, data, interfaces and surrounding infra structure
Protection Goal Description,Development of attack classes, realization of a value catalogue, identification of protection goals
Threat Analysis,Systematic identification of threats and development of e threat catalogue
![Page 46: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/46.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGYExpertise & Competences
Method Competences
Analysis and Evaluation of Industrial Security Concepts
Testing of Regulation and Control Systems
Development and Evaluation of Apps
Development of Information Security Concepts
Secure Engineering Methods for Regulation and Control Systems Software Engineering
Technology Competences
Development of Technologies for Product‐ and Pirate Protection
Development of Technologies for secure Identification of components and efficient Key Management
Development of Technologies for distributed Security‐Monitoring of Components
Development of Secure Engineering Test‐tools
![Page 47: IT SECURITY IN CONTEXT OF INDUSTRIE 4.0 ... 1_ 1000-1050_ Dr...Technology Data –Market Place Web‐based Remote Control Visual Security‐Dashboard Secure Processes Secure Data Secure](https://reader034.fdocuments.us/reader034/viewer/2022050117/5f4dac4b461794183f16cf03/html5/thumbnails/47.jpg)
© Fraunhofer SIT 2016 Dr. Th. Henkel SIT/ISS
FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY
Fraunhofer‐Institute forSecure Information Technology
Rheinstraße 7564295 Darmstadt, Germany
www.fraunhofer.de www.sit.fraunhofer.de
Dr. Thorsten [email protected]