+49 221 93724 0
HomePublikationen
Vorträge & Whitepaper
Automated Processing of Security Requirements and Controls for a common Industrie 4.0 Use Case (Englisch)
Due to the dynamic nature of the Industrie 4.0, future production systems will be reconfigured frequently and as a part of the engineering process, new system configurations will be deployed automatically. In order to keep pace with this development, it will be required to achieve the needed security levels in an automated way and to reduce the current static procedures and manual efforts as much as possible. Therefore, the development and modelling of all cyber security related functionalities is needed. This paper describes an approach for such a modelling based on security requirements and levels of the international standard IEC 62443 part 3-3 and a system description based on OASIS TOSCA for the deployment. The approach is applied to an Industrie 4.0 use case scenario based on edge cloud computing and an evaluation is performed to demonstrate its feasibility.
Modelling security requirements and controls for an automated deployment of industrial it systems (Englisch)
Due to the dynamic nature of the Industrial Internet and Industry 4.0, future production systems will be reconfigured frequently and as a part of the engineering process, new system configurations will be deployed automatically. In order to keep pace with this development, it will be required to achieve the needed security level in an automated way and to reduce the current static procedures and manual efforts as much as possible. Therefore, the development and modeling of requirements and capability profiles for all cyber security related aspects is needed. The paper describes an approach for such a modeling based on security requirements and levels of the international standard IEC-62443-3-3 and a system description based on OASIS TOSCA. The approach is applied to a real industrial use-case scenario and an evaluation is performed to demonstrate its feasibility.
Automatic mapping of cyber security requirements to support network slicing in software-defined networks (Englisch)
The process of digitalisation has an advanced impact on social lives, state affairs, and the industrial automation domain. Ubiquitous networks and the increased requirements in terms of Quality of Service (QoS) create the demand for future-proof network management. Therefore, new technological approaches, such as Software-Defined Networks (SDN) or the 5G Network Slicing concept, are considered. However, the important topic of cyber security has mainly been ignored in the past. Recently, this topic has gained a lot of attention due to frequently reported security related incidents, such as industrial espionage, or production system manipulations. Hence, this work proposes a concept for adding cyber security requirements to future network management paradigms. For this purpose, various security related standards and guidelines are available. However, these approaches are mainly static, require a high amount of manual efforts by experts, and need to be performed in a steady manner. Therefore, the proposed solution contains a dynamic, machine-readable, automatic, continuous, and future-proof approach to model and describe cyber security QoS requirements for the next generation network management.
Kontaktdaten:
rt-solutions.de GmbH
Oberländer Ufer 190a
50968 Köln
+49 (0) 221 93 72 40
IT-Control Framework mit ServiceNow® GRC
rt-solutions gestaltet für Ihr Unternehmen ganzheitliche IT-Control Frameworks, um die Einhaltung von Controls (risikoreduzierende Maßnahmen) regelmäßig zu überprüfen, zu reporten und identifizierte Defizite nachweislich auszuräumen. Das Ziel eines solchen IT-Control Frameworks ist es, Ihr Unternehmen vor nachteiligen Ereignissen in Bezug auf finanzielle, operative, strategische Compliance- und Reputationsschäden zu schützen.
Nähere Informationen finden Sie hier.
Industrial Communication for Factories (IC4F)
Die rt-solutions.de GmbH forscht zur Sicherheit in industriellen Netzen als Partner im Forschungsprojekt IC4F. Ziel des Projektes ist die Forschung und Entwicklung einer ganzheitlichen Lösung zur industriellen Kommunikation in der Fabrikautomation.
Mehr darüber erfahren Sie hier.
FIND - Future Industrial Network Architecture
Übergreifende Modellierung von Sicherheits-Anforderungen und -Eigenschaften.
rt-solutions.de gestaltet Cyber Security für die industriellen Netzwerke von morgen.
Offizielle Informationen über das Forschungsprojekt.
Hier geht es zum Beitrag.
Über uns
Wir helfen Ihnen die Sicherheit und Effizienz Ihrer IT nachhaltig zu steigern sowie Ihre IT-Risiken zu kontrollieren.
Dazu entwickeln wir tragfähige, praxistaugliche und passgenaue Lösungen für komplexe Herausforderungen.
Kontakt
Wir stehen Ihnen jederzeit gerne zur Verfügung.
Phone: +49 221 93724 0
Office: Oberländer Ufer 190a, 50968 Köln
Email: info@rt-solutions.de
Anfahrt
Unser Büro ist leicht mit dem Auto oder mit öffentlichen Verkehrsmitteln zu erreichen. Eine detaillierte Anfahrtsbeschreibung finden Sie hier.
© 2021 RT-SOLUTIONS.DE GMBH. ALLE RECHTE VORBEHALTEN.