On the Security of IO-Link Wireless Communication in the Safety Domain

Security is an essential requirement of Industrial Control System (ICS) environments and its underlying communication infrastructure. Especially the lowest communication level within Supervisory Control and Data Acquisition (SCADA) systems - the field level - commonly lacks security measures.Since e...

Full description

Saved in:
Bibliographic Details
Published in2022 IEEE 27th International Conference on Emerging Technologies and Factory Automation (ETFA) pp. 1 - 8
Main Authors Doebbert, Thomas Robert, Fischer, Florian, Merli, Dominik, Scholl, Gerd
Format Conference Proceeding
LanguageEnglish
Published IEEE 06.09.2022
Subjects
Industrial Wireless Networks
IO-Link Wireless
Measurement uncertainty
Protocols
Safety
Safety and Security
SCADA systems
Security
Wireless networks
Wireless sensor networks
Online AccessGet full text

Cover

More Information
Summary:Security is an essential requirement of Industrial Control System (ICS) environments and its underlying communication infrastructure. Especially the lowest communication level within Supervisory Control and Data Acquisition (SCADA) systems - the field level - commonly lacks security measures.Since emerging wireless technologies within field level expose the lowest communication infrastructure towards potential attackers, additional security measures above the prevalent concept of air-gapped communication must be considered.Therefore, this work analyzes security aspects for the wireless communication protocol IO-Link Wireless (IOLW), which is commonly used for sensor and actuator field level communication. A possible architecture for an IOLW safety layer has already been presented recently [1].In this paper, the overall attack surface of IOLW within its typical environment is analyzed and attack preconditions are investigated to assess the effectiveness of different security measures. Additionally, enhanced security measures are evaluated for the communication systems and the results are summarized. Also, interference of security measures and functional safety principles within the communication are investigated, which do not necessarily complement one another but may also have contradictory requirements.This work is intended to discuss and propose enhancements of the IOLW standard with additional security considerations in future implementations.
DOI:10.1109/ETFA52439.2022.9921464