Research of paired industrial firewalls in defense-in-depth architecture of integrated manufacturing or production system
Ning Jiang, Lin Hu, Zhenyu Yin, Chun-Yan Xi · 2017
The integrated manufacturing or production system is a cyber-physical system. According to the basic principle of defense in depth, the corresponding protection is carried out at different security zones. AS the key technologies of perimeter defense, industrial firewall is used between enterprise zone and manufacturing zone. By utilizing an industrial demilitarized zone in firewall, resources are shared between enterprise network and industrial networks without direct connections. To enhance the cyber security of servers such as data historian server in industrial demilitarized zone, application of paired Firewalls is a variation for a single firewall. Advantages of paired Firewalls architecture include stringent security and clear management separation.