{"id":268315,"date":"2024-09-24T09:57:00","date_gmt":"2024-09-24T07:57:00","guid":{"rendered":"https:\/\/amorph.pro\/?p=268315"},"modified":"2025-02-14T10:09:46","modified_gmt":"2025-02-14T09:09:46","slug":"safeguarding-industrial-information-the-need-for-secure-data-handling-and-transmission","status":"publish","type":"post","link":"https:\/\/amorph.pro\/ja\/safeguarding-industrial-information-the-need-for-secure-data-handling-and-transmission\/","title":{"rendered":"Safeguarding industrial information &#8211; The need for secure data handling and transmission"},"content":{"rendered":"\n<p>Many companies have started exploring the benefits of accessing the Industrial Internet of Things (IIoT) and implementing Industry 4.0. As more and more data are accessed and shared between systems, data security must also be addressed. Guidance is provided by organizations such as the Open Web Application Security Project (<strong>OWASP<\/strong>). The review below is about Amorph Systems\u2019 SMART<strong>UNIFIER<\/strong> product and the measures in place to address reliability and security during the product\u2019s lifecycle. This includes adherence to specifications and measures to ensure the highest level of protection is implemented for the credentials of the participating systems and the data that is transmitted.<\/p>\n\n\n\n<p>SMART<strong>UNIFIER <\/strong>has a fully decentralized architecture that enables quick and easy integration of shopfloor equipment, edge devices, and IT-systems without the requirement to deploy central platforms and databases. Communication is from one or multiple data sources to one or multiple data receivers in massively scalable topologies. SMART<strong>UNIFIER <\/strong>communication instances are typically operated directly on-premise (e.g., on Industrial PCs, Edge Gateways) or run within containerized environments (e.g., Docker, Cloud), thereby effectively isolating the data exchange services that they provide to avoid any interference with other services.<\/p>\n\n\n\n<p>The diagram below illustrates the architecture.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" width=\"1024\" height=\"634\" src=\"https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2-1024x634.jpg\" alt=\"Installation of smartunifier possible on the edge, on-premise or in the cloud as swarm\" class=\"wp-image-300024\" style=\"width:750px;height:464px\" srcset=\"https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2-1024x634.jpg 1024w, https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2-300x186.jpg 300w, https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2-768x476.jpg 768w, https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2-1536x951.jpg 1536w, https:\/\/amorph.pro\/wp-content\/uploads\/2021\/03\/2.jpg 1771w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">SMART<strong>UNIFIER<\/strong> COMUNICATIONS <\/figcaption><\/figure>\n<\/div>\n\n\n<p>Multiple decentralized Communication Instances can be deployed anywhere and managed by the SMART<strong>UNIFIER<\/strong>&nbsp;Manager, including real-time monitoring and logging of deployed Communication Instances. Industrial connectivity can be realized with any device or system communication protocol and any data format.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"reliability-and-security-in-the-development-lifecycle\">Reliability and Security in the Development Lifecycle<\/h2>\n\n\n\n<p>It is imperative that security, as well as reliability, are already addressed during the product\u2019s development phase. &nbsp;To this end, Amorph utilizes state-of-the-art software development platforms and tools. Building, testing, and deployment are automated using Jenkins Automation Server to facilitate continuous integration and delivery. To ensure code quality, continuous testing is conducted starting with unit tests for individual modules, integration tests to ensure interoperability of components, and end-to-end tests to ensure the integrity of the application. Testing has been automated, and build-checks are executed daily.<\/p>\n\n\n\n<p>In addition to following industry standards and guidelines, specific tools are also used to test code quality and scan for security vulnerabilities.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Sonarqube<\/strong> is used to ensure the maintainability, reliability, and security of the code. With regular scans, potential quality or security issues are detected early and addressed promptly to provide high-quality, secure code.<\/li>\n\n\n\n<li><strong>OWASP Dependency-Check<\/strong> is used to detect publicly disclosed vulnerabilities contained within the SMART<strong>UNIFIER<\/strong> project\u2019s dependencies to reduce risk in the software supply chain. Dependency-Track leverages a&nbsp;<a href=\"https:\/\/owasp.org\/www-community\/Component_Analysis#software-bill-of-materials-sbom\">Software Bill of Materials<\/a>&nbsp;(SBOM) capabilities to conduct composition analysis that traditional Software Composition Analysis (SCA) solutions cannot achieve.<\/li>\n\n\n\n<li> All software components are continuously updated with the latest security patches.<\/li>\n\n\n\n<li><strong>OWASP Zed Attack Proxy (ZAP)<\/strong> is used for penetration testing of SMARTUNIFIER to detect vulnerabilities to malicious attacks.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"connectivity-configuration-and-deployment\">Connectivity, Configuration, and Deployment<\/h2>\n\n\n\n<p>Configuration, deployment, and management of SMART<strong>UNIFIER<\/strong> Instances is done using SMART<strong>UNIFIER<\/strong> Manager. All configuration data is fully encrypted, unlike some simpler solutions, that store credentials as plain text within configuration files.&nbsp; Individual user authentication is supported and Windows AD \/ LDAP integration is available. SMART<strong>UNIFIER<\/strong> Manager makes it easy to deploy updates to the communication instances in the production environment so that integrity and security can continually be maintained.&nbsp;<\/p>\n\n\n\n<p>The diagram below illustrates security measures that are implemented with a SMART<strong>UNIFIER<\/strong> deployment.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"987\" height=\"586\" src=\"https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/Sicherheit-mit-SMARTUNIFIER.png\" alt=\"Sicherheit mit SMARTUNIFIER\n\" class=\"wp-image-302418\" srcset=\"https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/Sicherheit-mit-SMARTUNIFIER.png 987w, https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/Sicherheit-mit-SMARTUNIFIER-300x178.png 300w, https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/Sicherheit-mit-SMARTUNIFIER-768x456.png 768w\" sizes=\"(max-width: 987px) 100vw, 987px\" \/><figcaption class=\"wp-element-caption\">Security with SMART<strong>UNIFIER<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p>In some cases, at the shopfloor level, encryption is not supported by the protocols of legacy equipment. SMART<strong>UNIFIER <\/strong>can simultaneously handle encrypted and unencrypted communication and provides a way to introduce secured protocols for upper-level communication, as described in the next section.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"reliable-and-secure-operation\">Reliable and Secure Operation<\/h2>\n\n\n\n<p>Secure operation of interfaces starts with having all the identity and access management functions described above in place. SMART<strong>UNIFIER<\/strong> enables multiple vertical and horizontal connections between systems, and access can be secured with encrypted credentials and private key and identity certificates presented to both connecting parties for verification. The use of encryption and certificates is implemented for all industrial protocols enabling secured connections such as secured MQTT, secured OPC-UA, and others.<\/p>\n\n\n\n<p>Linux or Windows computer units provide the connectivity nodes where SMART<strong>UNIFIER<\/strong> is deployed for on-premise or edge deployments. Data may be stored temporarily on these HW devices as logs or for buffer (cache) purposes. This temporary data is protected by assigning the hardware with appropriate access rights and user roles.<\/p>\n\n\n\n<p>SMART<strong>UNIFIER<\/strong> can also be used to introduce secured protocols where unsecured data streams exist by deploying locally near shopfloor equipment or devices and mapping any unsecured equipment\/device interface into a secured protocol (e.g., OPC-UA, MQTT). This way, &#8220;unsecured data streams&#8221; coming from shopfloor equipment\/devices can be transferred to any northbound system in a secured manner by isolation of the equipment\/devices. The same principle can also be applied when sending control parameters (e.g., parameters for automatic screwdrivers, NC programs, recipes, &#8230;) or commands from a northbound system to the equipment\/device. This is illustrated in the diagram below.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"987\" height=\"343\" src=\"https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/SMARTUNIFIER-zur-Isolierung-ungesicherter-Produktionsgeraete.png\" alt=\"SMARTUNIFIER to isolate unsecured production device\" class=\"wp-image-302421\" srcset=\"https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/SMARTUNIFIER-zur-Isolierung-ungesicherter-Produktionsgeraete.png 987w, https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/SMARTUNIFIER-zur-Isolierung-ungesicherter-Produktionsgeraete-300x104.png 300w, https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/SMARTUNIFIER-zur-Isolierung-ungesicherter-Produktionsgeraete-768x267.png 768w\" sizes=\"(max-width: 987px) 100vw, 987px\" \/><figcaption class=\"wp-element-caption\">SMART<strong>UNIFIER<\/strong> to isolate unsecured production device<\/figcaption><\/figure>\n<\/div>\n\n\n<p>Containers are used to isolate SMART<strong>UNIFIER<\/strong> instances from Operating Systems resources at runtime. During operation, data integrity is protected with checksums ensuring that data is not lost or altered during transmission, and end-to-end transport encryption can be implemented to protect the transmitted content. All of these measures ensure that a high level of security is maintained during runtime. For operations monitoring, SMART<strong>UNIFIER <\/strong>creates detailed logs for all communication and other activities it performs. Integrating with external security supervision or monitoring systems (e.g., Splunk) and providing online log files via a dedicated monitoring communication channel is possible, further ensuring the integrity of communication processes and enabling early detection of intrusions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"conclusion-and-benefits\">Conclusion and Benefits<\/h2>\n\n\n\n<p>Industrial data exists in different components and systems, in various formats, with separate access protocols. To harness this data&#8217;s power and benefit from the synergies of system-wide interoperability, we must effectively digitize shopfloor data and deliver the content quickly, reliably, and securely. As described above, security is a central theme for SMART<strong>UNIFIER<\/strong>. With adherence to standards and utilization of best-of-breed technology and tools during the development lifecycle, during configuration and deployment, and during operation, steps are continuously taken to ensure the reliability, integrity, and security of data.<\/p>\n\n\n\n<p>With SMART<strong>UNIFIER<\/strong>, your industrial operation can easily and affordably implement secure communication with shopfloor equipment and throughout the enterprise. &nbsp;&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many companies &#8230;<\/p>\n","protected":false},"author":14,"featured_media":302370,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Safeguarding industrial information I amorph.pro","_seopress_titles_desc":"Enhance Industrial Connectivity with SMARTUNIFIER: Secure and Efficient Data Exchange for Your Company.","_seopress_robots_index":"","bwfblock_default_font":"","inline_featured_image":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[79],"tags":[157,163,158,156,155,353,354,120,124],"class_list":["post-268315","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-comunications","tag-connectivity-2","tag-mqtt","tag-safeguarding","tag-security","tag-shopfloor","tag-smartconnectiviy","tag-iiot","tag-smartunifier"],"taxonomy_info":{"category":[{"value":79,"label":"Blog"}],"post_tag":[{"value":157,"label":"#comunications"},{"value":163,"label":"#connectivity"},{"value":158,"label":"#MQTT"},{"value":156,"label":"#safeguarding"},{"value":155,"label":"#security"},{"value":353,"label":"#shopfloor"},{"value":354,"label":"#smartconnectiviy"},{"value":120,"label":"IIOT"},{"value":124,"label":"SMARTUNIFIER"}]},"featured_image_src_large":["https:\/\/amorph.pro\/wp-content\/uploads\/2024\/09\/security-with-SU.jpg",940,788,false],"author_info":{"display_name":"Alan Burgess","author_link":"https:\/\/amorph.pro\/ja\/author\/a_burgess\/"},"comment_info":0,"category_info":[{"term_id":79,"name":"Blog","slug":"blog","term_group":0,"term_taxonomy_id":79,"taxonomy":"category","description":"","parent":0,"count":59,"filter":"raw","cat_ID":79,"category_count":59,"category_description":"","cat_name":"Blog","category_nicename":"blog","category_parent":0}],"tag_info":[{"term_id":157,"name":"#comunications","slug":"comunications","term_group":0,"term_taxonomy_id":157,"taxonomy":"post_tag","description":"","parent":0,"count":8,"filter":"raw"},{"term_id":163,"name":"#connectivity","slug":"connectivity-2","term_group":0,"term_taxonomy_id":163,"taxonomy":"post_tag","description":"","parent":0,"count":32,"filter":"raw"},{"term_id":158,"name":"#MQTT","slug":"mqtt","term_group":0,"term_taxonomy_id":158,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw"},{"term_id":156,"name":"#safeguarding","slug":"safeguarding","term_group":0,"term_taxonomy_id":156,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw"},{"term_id":155,"name":"#security","slug":"security","term_group":0,"term_taxonomy_id":155,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw"},{"term_id":353,"name":"#shopfloor","slug":"shopfloor","term_group":0,"term_taxonomy_id":353,"taxonomy":"post_tag","description":"","parent":0,"count":7,"filter":"raw"},{"term_id":354,"name":"#smartconnectiviy","slug":"smartconnectiviy","term_group":0,"term_taxonomy_id":354,"taxonomy":"post_tag","description":"","parent":0,"count":14,"filter":"raw"},{"term_id":120,"name":"IIOT","slug":"iiot","term_group":0,"term_taxonomy_id":120,"taxonomy":"post_tag","description":"","parent":0,"count":30,"filter":"raw"},{"term_id":124,"name":"SMARTUNIFIER","slug":"smartunifier","term_group":0,"term_taxonomy_id":124,"taxonomy":"post_tag","description":"","parent":0,"count":43,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/posts\/268315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/comments?post=268315"}],"version-history":[{"count":3,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/posts\/268315\/revisions"}],"predecessor-version":[{"id":302425,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/posts\/268315\/revisions\/302425"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/media\/302370"}],"wp:attachment":[{"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/media?parent=268315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/categories?post=268315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/amorph.pro\/ja\/wp-json\/wp\/v2\/tags?post=268315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}