Cyber Security in Industrial Solutions
Article Sidebar
Main Article Content
Abstract
This article describes methods for securely connecting industrial networks with business networks. It presents the practical application of ISO/IEC 27001 and IEC 62443 standards, including the CIA triad model and the zoning concept. The text discusses technologies that facilitate integration, such as VPN, MQTT protocol, firewalls, and container-based virtualisation. The tests were performed in a TIA Portal simulation on a Siemens S7- 1500 controller. This work highlights traffic encryption using a reverse proxy and the importance of VPNs in isolating services from the public network.
Downloads
Article Details
Section
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
How to Cite
References
A. Nowocień, "Digitalizacja w systemach automatyki SIMATIC", Helion Publishing, 2023. https://www.amazon.ie/Digitalizacja-systemach-automatyki-SIMATIC-%C4%87wiczenia/dp/8328902095
K. Uutela, "Cybersecurity Standard-Based Model for IT/OT Converged Environments", 2025.
URL: https://www.utupub.fi/server/api/core/bitstreams/d397c803-47ec-4edf-8e3e-ab2211650b32/content
R. Anderson, "Security Engineering", 3rd Edition, 2020.
URL: https://www.cl.cam.ac.uk/~rja14/book.html
NIST SP 800-57 Part 1 Rev. 5, 2020. URL: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf
Docker, "Get Started".
URL: https://docs.docker.com/get-started/docker-overview/
NIST SP 800-82r3, 2023. DOI: 10.6028/NIST.SP.800-82r3
Siemens, "Industrial Security Operational Guidelines". URL: https://assets.new.siemens.com/siemens/assets/api/uuid:17f1443e-76db4060-9e01-f5ccf4fdf5bb/industrial-security-operational-guidelines-en.pdf
TechTarget, "What is a DMZ in networking?"
URL: https://www.techtarget.com/searchsecurity/definition/DMZ
Palo Alto Networks, "What Is a VPN Tunnel?"
URL: https://www.paloaltonetworks.com/cyberpedia/what-is-a-vpn-tunnel
OpenVPN, "How-To Guide".
URL: https://openvpn.net/community-docs/how-to.html
Cloudflare, "IPsec VPNs vs. SSL VPNs".
URL: https://www.cloudflare.com/learning/access-management/ipsec-vs-ssl-vpn/
Paho-MQTT. URL: https://pypi.org/project/paho-mqtt/
Palo Alto Networks, "What Is a Stateful Firewall?"
URL: https://www.paloaltonetworks.com/cyberpedia/what-is-a-stateful-firewall
Docker, "Bridge Network Driver".
URL: https://docs.docker.com/engine/network/drivers/bridge/
NGINX, "Terminating SSL/TCP".
URL: https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-tcp/
Cloudflare, "What is a reverse proxy?"
URL: https://www.cloudflare.com/pl-pl/learning/cdn/glossary/reverse-proxy/
Siemens, "S7-1200 System Manual". URL: https://support.industry.siemens.com/dl/files/011/109972011/att_1308257/v1/S71200_G2_system_manual_en-US.pdf
OpenVPN, "Hardening OpenVPN Security". URL: https://openvpn.net/community-docs/hardening-openvpn-security.html
Cisco, "Configure Isolated Private VLANs". URL: https://www.cisco.com/c/en/us/support/docs/lan-switching/private-vlans-pvlans-promiscuous-isolated-community/40781-194.html
CISA, "Securing Network Infrastructure Devices".
URL: https://www.cisa.gov/news-events/news/securing-network-infrastructure-devices