On Protecting Industrial Automation and Control Systems against Electronic Attacks

Protecting manufacturing control systems from network-based attacks is becoming more important with increasing demand on vertical integration of plant floor and corporate networks. This paper discusses the differences between corporate networks and plant floor networks from a security perspective, and outlines some requirements for the plant floor network security. The challenges for the development of security solutions for automation and control systems are highlighted. Several on-going standardization activities are introduced. A conceptual reference framework for protecting industrial automation and control systems is proposed and features for detection and prevention of network-based attacks are disclosed. This paper ends with the discussion of possible solutions for the existing vulnerability examples.