DI05000271 · Semester 5 · 5G scheme
Industrial Network Security
Notes and solutions following the Gujarat Technological University (GTU) syllabus for DI05000271. Independent material — not issued by the university.
Materials
Complete Book
The whole syllabus, unit by unit, written for the exam.
Complete Book
48 pages
Premium Preview · 20 pages
Syllabus units
Unit 1: Introduction to ICS and Operations
- 1.1 Industrial control system (ICS), common industrial security recommendations.
- 1.2 APTs and weaponized malware
- 1.3 System assets: Programmable Logic Controller, Remote Terminal Unit, Intelligent Electronic Device, Human-Machine Interface, Supervisory Workstations, Data Historian, and other assets
- 1.3.1 System operations: Control loops, control processes, feedback loops, production information management, business information management
- 1.5 Process management
Unit 2: ICS Network Design and Architecture
- 2.1 Introduction to Industrial Networking.
- 2.2 Differences in Industrial Network Architectures by Function
- 2.3 Common Topologies
- 2.4 Network Segmentation, Types of Segmentation, Characteristics of Segmentation, Physical vs. Logical Segmentation
- 2.5 Network Services
- 2.6 Wireless Networks
- 2.7 Remote Access
- Performance Considerations: Latency, Jitter, Bandwidth, Throughput, Type of Service, Class of Service, Quality of Service, Network Hops
Unit 3: Industrial Network Protocols
- 3.1 Overview of Industrial Network Protocols.
- 3.2 Fieldbus Protocols: Modbus, Distributed Network Protocol (DNP), PROFIBUS, Industrial Ethernet, PROFINET, EtherCAT
- 3.3 Backend Protocols: Open Process Communications (OPC), Inter-Control Center Communications Protocol (ICCP)
- 3.4 AMI and the Smart Grid
- 3.4.1 Industrial Protocol Simulators
Unit 4: Establishing Zones and Conduits
- 4.1 Security Zones and Conduits
- 4.2 Identifying and Classifying Security Zones and Conduits
- 4.3 Recommended Security Zone Separation
- 4.3.1 Establishing Security Zones and Conduits
Unit 5: Implementing Security and Access Controls
- 5.1 Implementing Network Security Controls
- 5.2 Implementing Host Security and Access Controls
- 5.2.1 How Much Security is Enough?
About this course
The aim of this subject is to provide Instrumentation & Control diploma engineering students with the knowledge and skills necessary to protect industrial networks from cybersecurity threats. As more and more industrial systems become connected to the internet, the risk of cyber-attacks increases. By studying Industrial Network Security, students will be better prepared to design, implement, and maintain secure industrial networks. This will help them ensure the reliability and availability of industrial systems, which is critical for the manufacturing, energy, and transportation industries.