Industrial Ethernet security check

Security for an industrial Ethernet network has to thwart hacking, unauthorized access, and disruption caused by unwanted traffic in industrial control and automation environments, which can cause downtime, program failures, and health and safety problems. Phoenix Contact gives security tips.


Security for an industrial Ethernet network is essential. What was once strictly an IT or “office network” issue has now become vital for plant managers and control engineers. Hacking, unauthorized access, and disruption caused by unwanted traffic in industrial control and automation environments can cause downtime, program failures, and health and safety problems. The Stuxnet worm is only one example of the challenges emerging as supervisory control and data acquisition (SCADA) and control systems receive more attention from the hacking and malware community.

Control network security lessonsImplementing proper security while designing a new install or doing an upgrade to your industrial network is easier, and more cost-effective, than trying to address it in a mature environment. There are emerging product lines in the industrial arena that provide both the security and “higher level” networking found in commercial equipment, while featuring rugged hardware that meets the demands of the industrial network.

A firewall is a big first step in securing an industrial network. Stateful firewalls have long been used in the IT world but are now available in industrial equipment. A firewall allows an engineer to block certain network traffic from getting onto the control network by inspecting characteristics such as source and destination IP address and protocol, for example, Modbus/TCP. Simple rules can be created on the firewall to allow “acceptable” traffic through and block unwanted or unnecessary traffic from getting on the network. Another means of providing security on the network is to implement a strategy of “defense in depth.” This principle provides layers of security, which helps increase the difficulty of breaching the network and also mitigates the scope of any damage done by confining the breach to a small, isolated area. Due to the modularity of this approach, it is very easy to add layers of defense and to incorporate new machines or cells as they come on-line.

Increasingly, industrial networks are linked to IT networks, and in some cases there is a shared responsibility of supporting the network. This makes interoperability with IT equipment and protocols vital. Standardization is heavily used and greatly sought after in the IT world, where it helps drive down support costs and learning curves, even at the occasional expense of innovation. So when interacting with the IT network, you should strive to use open and accepted protocols and standards such as Rapid Spanning Tree (RSTP) for redundancy, VLANs for network segmentation, and IPSec for secure remote communication.

- Dan Schaffer is with Phoenix Contact, product marketing - networking and security. Edited by Mark T. Hoske, CFE Media, Control Engineering, 

Wireless Ethernet radio for high-interference areas 

More on industrial cyber security

More on industrial networks 

No comments
The Top Plant program honors outstanding manufacturing facilities in North America. View the 2013 Top Plant.
The Product of the Year program recognizes products newly released in the manufacturing industries.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
Sister act: Building on their father's legacy, a new generation moves Bales Metal Surface Solutions forward; Meet the 2015 Engineering Leaders Under 40
2015 Mid-Year Report: Manufacturing's newest tool: In a digital age, digits will play a key role in the plant of the future; Ethernet certification; Mitigate harmonics; World class maintenance
2015 Lubrication Guide: Green and gold in lubrication: Environmentally friendly fluids and sealing systems offer a new perspective
Drilling for Big Data: Managing the flow of information; Big data drilldown series: Challenge and opportunity; OT to IT: Creating a circle of improvement; Industry loses best workers, again
Pipeline vulnerabilities? Securing hydrocarbon transit; Predictive analytics hit the mainstream; Dirty pipelines decrease flow, production—pig your line; Ensuring pipeline physical and cyber security
Cyber security attack: The threat is real; Hacking O&G control systems: Understanding the cyber risk; The active cyber defense cycle
Designing positive-energy buildings; Ensuring power quality; Complying with NFPA 110; Minimizing arc flash hazards
Building high availability into industrial computers; Of key metrics and myth busting; The truth about five common VFD myths
New industrial buildings: Greener, cleaner, leaner; New building designs for industry; Take a new look at absorption cooling; Offshored jobs start to come back

Annual Salary Survey

After almost a decade of uncertainty, the confidence of plant floor managers is soaring. Even with a number of challenges and while implementing new technologies, there is a renewed sense of optimism among plant managers about their business and their future.

The respondents to the 2014 Plant Engineering Salary Survey come from throughout the U.S. and serve a variety of industries, but they are uniform in their optimism about manufacturing. This year’s survey found 79% consider manufacturing a secure career. That’s up from 75% in 2013 and significantly higher than the 63% figure when Plant Engineering first started asking that question a decade ago.

Read more: 2014 Salary Survey: Confidence rises amid the challenges

Maintenance and reliability tips and best practices from the maintenance and reliability coaches at Allied Reliability Group.
The One Voice for Manufacturing blog reports on federal public policy issues impacting the manufacturing sector. One Voice is a joint effort by the National Tooling and Machining...
The Society for Maintenance and Reliability Professionals an organization devoted...
Join this ongoing discussion of machine guarding topics, including solutions assessments, regulatory compliance, gap analysis...
IMS Research, recently acquired by IHS Inc., is a leading independent supplier of market research and consultancy to the global electronics industry.
Maintenance is not optional in manufacturing. It’s a profit center, driving productivity and uptime while reducing overall repair costs.
The Lachance on CMMS blog is about current maintenance topics. Blogger Paul Lachance is president and chief technology officer for Smartware Group.