Cybersecurity Requirements for Industrial Machine Control Systems
Source abstract
Abstract
The first part of this paper discusses the research context, taking a closer look at the development of Industry 4.0 and the growing importance of the IIoT, which entails new cybersecurity challenges. The issue of cyber threats and the need to increase the level of protection in machine control systems, which are particularly vulnerable to attacks due to their connection to the network, is also presented. The Introduction concludes with a presentation of the article’s objective, which is to analyze the requirements of security levels (SLs) and the implementation of relevant international standards. The next section reviews the current research on cybersecurity in machine control systems. This section also points out the research gaps that the article aims to fill. The next section presents the risk assessment used to ensure safety during machine operations based on ISO 12100. The article describes safety functions implemented in machine control systems, including the SIL (safety integrity level) and PL (performance level) specifications. An important part of the article is the creation of a relationship between PL and SL, showing how the safety functions of systems are related to protection against cyber threats. The last part of the article gives a case study in the form of examples of machines and their control systems performing safety functions, which require various SLs depending on the PLs.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Smart Grid Security and Resilience · Physical Unclonable Functions (PUFs) and Hardware Security · Electrostatic Discharge in Electronics
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Mining, Safety Engineering and Industrial Automation, Silesian University of Technology, 44-100 Gliwice, Poland
Central Institute for Labour Protection—National Research Institute, 00-701 Warszawa, Poland
Funding
resources of the National Centre for Research and Development
References (29)
Show source-provided references
1. Stallings, W. (2020). Network Security Essentials: Applications and Standards, Pearson.
2. Tanveer, A., Sinha, R., MacDonell, S.G., Leitao, P., and Vyatkin, V. (2021). Designing Actively Secure, Highly Available Industrial Automation Applications. arXiv.
3. Lesi, V., Jakovljevic, Z., and Pajic, M. (2020). Security Analysis for Distributed IoT-Based Industrial Automation. arXiv, Available online: https://arxiv.org/abs/2006.00044.
4. Duque Anton, S.D., Fraunholz, D., Krohmer, D., Reti, D., Schneider, D., and Schotten, H.D. (2021). The Global State of Security in Industrial Control Systems: An Empirical Analysis of Vulnerabilities around the World. arXiv, Available online: https://arxiv.org/abs/2111.13862.
5. Buczkowski, P., Malacaria, P., Hankin, C., and Fielder, A. (2022). Optimal Security Hardening over a Probabilistic Attack Graph: A Case Study of an Industrial Control System using the CySecTool Tool. arXiv, Available online: https://arxiv.org/abs/2204.11707.10.1145/3510547.3517919 ↗
6. Boyes, W. (2010). Instrumentation Reference Book, Butterworth-Heinemann. Available online: https://www.sciencedirect.com/science/article/pii/B9780750683081000577.
7. Mesarovic, M.D., and Takahara, Y. (1970). Theory of Multi-Level Hierarchical Systems, Academic Press.
8. False Data Injection Attacks against State Estimation in Electric Power Grids10.1145/1952982.1952995 ↗
9. Slay, J., and Miller, M. (2007). Lessons Learned from the Maroochy Water Breach. International Conference on Critical Infrastructure Protection, Springer.10.1007/978-0-387-75462-8_6 ↗
10. Property-Based Attestation without a Trusted Third Party
11. Baek, J., Bao, F., Chen, K., and Lai, X. (2008). Universally Composable Security Analysis of TLS. Provable Security. ProvSec 2008, Springer. Lecture Notes in Computer Science.10.1007/978-3-540-88733-1 ↗
12. Manowska, A., Boros, M., Hassan, M.W., Bluszcz, A., and Tobór-Osadnik, K. (2024). A Modern Approach to Securing Critical Infrastructure in Energy Transmission Networks: Integration of Cryptographic Mechanisms and Biometric Data. Electronics, 13.10.3390/electronics13142849 ↗
13. Cutillo, L.A., Mark, M., and Thorsten, S. (2025, January 23). Security and Privacy in Online Social Networks. Handbook of Social Network Technologies. Available online: https://api.semanticscholar.org/CorpusID:19873542.
14. Śliwiński, M., and Piesik, E. (2021). Designing control and protection systems with regard to integrated functional safety and cybersecurity aspects. Energies, 14.10.3390/en14082227 ↗
15. Common errors in machine safety-related control systems and methods of their elimination10.5604/01.3001.0053.9063 ↗
16. (2025, January 23). Regulation (EU) 2023/1230 of the European Parliament and of the Council of 14 June 2023 on machinery and repealing Directive 2006/42/EC of the European Parliament and of the Council and Council Directive 73/361/EEC, Available online: https://eur-lex.europa.eu/eli/reg/2023/1230/oj/eng.
17. (2010). Safety of Machinery. General Principles for Design. Risk Assessment and Risk Reduction (Standard No. ISO 12100:2010).
18. (2023). Safety of Machinery. Safety-Related Parts of Control Systems—General Principles for Design (Standard No. ISO 13849-1:2023).
19. (2024). Safety of Machinery. Functional Safety of Safety-Related Control Systems (Standard No. IEC 62061:2021+A1:2024).
20. Grall, B., and Soares, G. (2011). Periodical inspection frequency of safety related control systems of machinery—Practical recommendations for the determination. Advances in Safety, Reliability and Risk Management, Taylor & Francis Group.
21. (2022). Information security, cybersecurity and privacy protection—Information security management systems—Requirements (Standard No. ISO/IEC 27001:2022).
22. (2009). Industrial communication networks - Network and system security—Part 1-1: Terminology, Concepts and Models (Standard No. IEC TS 62443-1-1:2009).
23. (2019). Industrial Communication Networks—Network and System Security—Part 1-1: Terminology, Concepts and Models (Standard No. IEC 62443-4-2:2019).
24. (2020). Security for Industrial Automation And Control Systems—Part 3-2: Security Risk Assessment for System Design (Standard No. IEC 62443-3-2:2020).
25. (2012). Safety of Machinery—Safety-Related Parts of Control Systems Part 2: Validation (Standard No. ISO 13849-2:2012).
26. (2020). Safety of Machinery—Electro-Sensitive Protective Equipment—Part 1: General Requirements and Tests (Standard No. IEC 61496-1:2020).
27. (2015). Safety of Machinery—Emergency Stop Function—Principles for Design (Standard No. ISO 13850:2015).
28. (2011). Robots and Robotic Devices—Safety Requirements for Industrial Robots Part 2: Robot Systems and Integration (Standard No. ISO 10218-2:2011).
29. (2017). Machine Tools Safety—Presses Part 3: Safety Requirements for Hydraulic Presses (Standard No. ISO 16092-3:2017).