Industrial Network Security, 3rd Edition

9: Establishing Zones and Conduits

Abstract

Zones and conduits are a fundamental concept of industrial network cybersecurity. By grouping similar devices or systems into “zones” according to security levels, and controlling communications between zones, a strong foundation of security will be realized. But how do you know what belongs in what zone?

Keywords

Conduit; IEC-62443; ISA-62443; ISA-99; Security levels; Zone

Information in this chapter

• Security Zones and Conduits Explained

• Identifying and Classifying Security Zones and Conduits

• Recommended Security Zone Separation

• Establishing Security Zones and Conduits

The concepts of defense in depth, as discussed up to this point, have focused on the separation ...