Implementation of a Security Policy in Distributed Safety Related I&C Systems

Abstract

Today’s I&C Systems usually are distributed computer systems with interfaces to sensors and actuators for process control. Once someone has access to a any part of this distributed system he possibly is in control of part of the process. Networks of distributed I&C systems provide an ideal infrastructure for remote, quiet and inconspicuous hacking attacks against process computers in I&C systems. It is vital for safe process operation to avoid any subversion of the security of the I&C system jeopardizing it’s integrity, availability and confidentiality. This paper starts from a rather generic model of a distributed computerized safety system, identifies important information-storage, -flow and -processing, gives an example of how to set up a security policy and finally discusses the implementation of this policy including service and maintenance issues.