Cybersecurity is a crucial aspect for OT infrastructure

Connected devices have become an integral part of our society. This brings with it that the importance of cybersecurity has also increased significantly. With the Ewon Cosy+ from HMS Networks, Bintz Technics offers an innovative generation of industrial VPN routers that significantly improve the level of cybersecurity for remote industrial access. These routers were tested to IEC 62443-4-2 standards by NVISO, globally recognised expert in cybersecurity. At ABISS, the distributor with technical expertise based in Zaventem will incidentally also present the new Anybus Defender series, which ensures that OT networks can communicate with each other in a secure manner.

“For networked devices, security should start the moment they are switched on. Running a trusted and authentic code starts with the secure boot of the device. ‘Secure Boot’ ensures that only software validated by the manufacturer can be executed. Without that process, one could, for example, load a modified operating system or manipulated software if one can interfere between the different boot phases,” states sales engineer Wouter Mathieu at Bintz Technics, distributor of HMS Networks“ products in Belgium and Luxembourg. ”The Ewon Cosy+ industrial VPN router takes cybersecurity to the next level by guaranteeing a completely secure start-up sequence. This ensures that only programme code approved by Ewon is executed. The authentication chain consists of public and private keys, combined with a digital signature. Only when these elements match, the bootloader is loaded. If this verification chain is interrupted, the device will not boot."

According to IEC 62443-4-2 standard

Cybersecurity was a hugely important issue when developing the Ewon Cosy+ routers. This is why HMS Networks also collaborated with NVISO, a leading independent organisation specialising in industrial cybersecurity. “Ewon Cosy+ routers carry the ISO 27001 certification, which mainly focuses on IT security, and have now been tested by NVISO's specialists according to IEC 62443-4-2 standards, which provide a comprehensive framework for securing industrial equipment against cyber-attacks,” the sales engineer emphasises. “The security of OT networks is of paramount importance. The implementation of the IEC 62443 standard ensures that devices and networks are better protected against cyber attacks, ensuring the continuity of the factory network.”

Anybus Defender series

The manufacturing sector is one of the biggest targets for cyber attacks. More effective solutions were therefore needed to secure existing OT networks to minimise the impact of a (potential) cyber attack. New regulations, for example NIS2, and standardisation initiatives such as ISA/IEC 62443, should encourage companies to optimise their network security measures and protect critical devices even better.

Network availability in OT is even more crucial than in IT. OT networks are also traditionally designed to be very flat. As a result, unauthorised access to one machine network can potentially spread quickly throughout the entire plant network, leading to a complete downtime and a significantly longer period to restore the system. “The new Anybus products ensure that OT networks can communicate with each other in a secure manner. For example, the industrial firewalls type Anybus Defender (Compact) provide protection against cyber attacks by dividing the machine network into controllable and logically separate network sections. This prevents an intruder from penetrating further into the network,” explains Wouter Mathieu. “An additional feature of the Defender is that communication traffic can be controlled at the packet level through Deep Package Inspection. For example, it is possible to only allow communication of a specific industrial protocol and no other IP traffic. All these functions can be managed centrally via a management console, ensuring a clear and easy-to-configure environment. All this is fully compliant with NIS2 regulations and in line with IEC 62443.” You can find Bintz Technics at booth 52 of the ABISS trade fair.