ABSTRACT

Security measures for information technology (IT) systems in any organization aim to achieve three basic security goals, namely: confidentiality, integrity, and availability. This chapter discusses security in the context of the life cycle of IT systems. It provides an overview of the most common technical means to enforce security goals that are also applicable to field area networks (FANs). The chapter introduces the important security aspects namely: cryptography, authentication and access control, firewalls and intrusion detection systems (IDSs), and security evaluations. For automation networks, in particular, those used for the field level of the automation hierarchy, many different communication technologies are available today. Classical fieldbus systems were the first networks, followed by a number of developments based on Ethernet. Internet protocol (IP)-based networks dominate the management level and also backbone networks interconnecting separated automation systems. Smart grids are among the most novel large-scale industrial networks and transfer sensitive data that must be properly protected.