从概念上讲，Richerzhagen 说工业的网络安全是独立于分支机构的。特性和功能集适用于所有数字化自动化过程。工厂和过程自动化特别令人兴奋，因为它们为公司内部的价值创造提供了巨大的杠杆。它提供了将客户直接与制造过程联系起来的可能性——这是工业价值链的基石。这转化为订单管理、物流、采购、质量保证，是销售。

“自动化行业在为其领域设计创新和独特解决方案的灵活性和可扩展性下蓬勃发展。创建网络安全解决方案以保护他们的生产力，同时遵守网络安全法规是未来的挑战。迄今为止，覆盖的安全解决方案为客户提供了安全性的提升，但创建了一个具有高管理开销和低可扩展性的补丁工作解决方案，”她补充道。

西门子解决方案旨在将这种网络安全性能集成到自动化级别，而不仅仅是新安装。目标是使用棕地安装，为成功的应用程序提供网络安全模型，以延长其产品生命周期。它是关于重新发现制造过程中的灵活性并通过工业网络安全扩展它。

基于 SCALANCE SC 设备的现有安全概念现在可以通过简单安装基于云的远程访问服务 Zscaler Private Access 作为 SCALANCE LPE（本地处理引擎）上的 docker 容器来补充。这种在 OT 深度防御和 IT 驱动的零信任模型中建立良好的组合为工业环境创建了一个安全的访问解决方案。此外，对可用性和实时能力的生产要求继续得到满足。


 

消除冲突并改进确定性

ODVA 总裁兼执行董事 Al Beydoun 博士表示，工业网络的关键技术趋势正在影响一代工业以太网网络组件的开发。

人工智能和机器学习算法通过低成本的边缘计算能力和增强的连接性为新的网络/安全设备提供动力，这些设备可以通过深度数据包检查、入侵监控和更容易管理访问控制来增强安全性，”Beydoun 说。“鉴于网络交换机可以成为启用 IIoT 应用以及检测和识别 OT 网络中的不良行为者的关键环节，安全可见性是深度防御方法的重要组成部分。纵深安全防御的另一个关键组成部分是适当的网络设计和规划，以及带有垂直分层交换机的分段网络。”

Beydoun 说，就像海船的隔间可以在船体破裂的情况下被密封一样，拥有一个带有安全区域的网络可以帮助遏制对更大系统的过多影响的入侵。这种设计确保了一个区域或一个交换机内的故障不会影响整个操作。网络交换机内的本地安全智能可以帮助识别直接遇到的威胁。

“一旦通过深度数据包检查识别出威胁，元数据就可以发送到网络安全设备以帮助减轻威胁。防火墙还可以根据防火墙策略进行深度数据包检查并防止威胁。基于云的数据分析还可以帮助识别更大规模的趋势和不合适的行动，然后可以在当地转化为行动，”他补充道。



以下是我司【主营产品】，有需要可以发来帮您对比下价格哦!

主营：世界品牌的PLC 、DCS 系统备件 模块

①Allen-Bradley(美国AB)系列产品》

②Schneider(施耐德电气)系列产品》

③General electric(通用电气)系列产品》

④Westinghouse(美国西屋)系列产品》

⑤SIEMENS(西门子系列产品)》

⑥销售ABB Robots. FANUC Robots、YASKAWA Robots、KUKA Robots、Mitsubishi Robots、OTC Robots、Panasonic Robots、MOTOMAN Robots。

⑦estinghouse(西屋)： OVATION系统、WDPF系统、MAX0系统备件。

⑧Invensys Foxboro(福克斯波罗)：I/A Series系统，FBM(现场输入/输出模块)顺序控制、梯形逻辑控制、事故追忆处理、数模转换、输入/输出信号处理、数据通信及处理等。Invensys Triconex: 冗余容错控制系统、基于三重模件冗余(TMR)结构的现代化的容错控制器。

⑨Siemens(西门子)：Siemens MOORE， Siemens Simatic C1，Siemens数控系统等。

⑩Bosch Rexroth(博世力士乐)：Indramat，I/O模块,PLC控制器,驱动模块等。

◆Motorola(摩托)：MVME 162、MVME 167、MVME1772、MVME177等系列。

PLC模块，可编程控制器，CPU模块，IO模块，DO模块，AI模块，DI模块，网通信模块，

以太网模块，运动控制模块，模拟量输入模块，模拟量输出模块，数字输入模块，数字输出

模块，冗余模块，电源模块，继电器输出模块，继电器输入模块，处理器模块。

 

Conceptually, Richerzhagen said that cybersecurity for Industry is branch-independent. The feature and function sets are applicable to all digitized automation processes. Factory and process automation are particularly exciting as they offer large levers for value generation within a company. It offers the possibility to tie the customer directly into the manufacturing process – the keystone of the industrial value chain. This translates to order management, logistics, purchasing, quality assurance and ideally right down to sales.

“The automation sector has flourished under the flexibility and scalability to design innovative and unique solutions for their field. Creating a cybersecurity solution to protect their productivity while holding compliance to the newest cybersecurity regulations is the challenge ahead. To date, overlayed security solutions offer customers a boost to their security but creates a patch work solution with high administration overhead and low scalability,” she added.

The newest solutions from Siemens are aiming to integrate this cybersecurity performance down to the automation level and not just for new installations. The goal is to work with brownfield installations, giving successful applications the cybersecurity model to extend their product lifecycle. It is about rediscovering the flexibility in the manufacturing process and extending it with industrial cybersecurity.

Already existing security concepts based on SCALANCE SC devices can now be supplemented by the simple installation of the cloud-based remote access service Zscaler Private Access as a docker container on the SCALANCE LPE (local processing engine). This combination of the well established in OT Defense in Depth and the IT driven Zero Trust model creates a secure access solution for industrial environments. In addition, production requirements for availability and real-time capabilities continue to be met.

Fully switched networks

Eliminating collisions and improved determinism

Dr. Al Beydoun, President and Executive Director at ODVA, said that key technical trends in industrial networking are influencing the development of the latest generation of Industrial Ethernet Networking components.

Artificial intelligence and machine learning algorithms enabled by lower cost edge computing power and increased connectivity are powering new network/security appliances that can enhance security through deep packet inspection, intrusion monitoring, and easier to manage access control,” Beydoun said. “Security visibility is an important part of a defense in depth approach given that network switches can be a key link in both enabling IIoT applications as well as detecting and identifying bad actors within OT networks. Another key component of defense in depth security is proper network design and planning with segmented networks with vertically layered switches.”

Beydoun said that, in the same way that sea going vessels have compartments that can be sealed in case of a hull breach, having a network with security zones can help to contain an intrusion from impacting too much of the larger system. This design ensures that a failure in one zone or within one switch doesn’t affect the entire operation. Local security intelligence within network switches can help identify threats that are directly encountered.

“Once the threat is identified via deep packet inspection the metadata can be sent to a cybersecurity device to help mitigate the threat. Firewalls can also do deep packet inspection and prevent threats based on firewall policies. Cloud based data analysis can also help to identify larger scale trends and actions that are out of place that can then be translated into action within the local area,” he added.