Security by design for Industry 4.0 Tracing design decisions model-based

Due to increasing networking and new vertical communication paths from the field level to the cloud, Industry 4.0 systems are increasingly exposed to cyber threats. Security by Design is the principle of remedying security risks during the planning phase. For this purpose, security analyses are used, ranging from the identification and evaluation of the assets and their threats, to the definition of security requirements and the selection of suitable counter-measures. With increasing plant size it can become a challenge in document-based approaches to describe the security considerations and design decisions from the early design phases in a manner which is consistent with the IT-architecture of the plant and comprehensible over the plant life cycle. In this article, a model-based approach is proposed to meet this challenge.