Cyber-Security - ABB -free@home SAP/S.3 Product Manual

2.5

Cyber-security

Industry faces intensifying cyber security risks. In order to increase stability, security and
robustness of its solutions, ABB has formally established cyber security robustness testing as
part of the product development process.
In addition, the following measures are prerequisites for the safe operation of your free@home
system.
Prevention of access to the different media
The careful isolation oft he system against unauthorised access is the basis for each protective
concept. In the case of a free@home system, only authorised persons may have physical
access to the free@home system, as well as the System Access Point. During planning and
installation all free@home media (cable and wireless) and all components prone to cyber
attacks, must be protected as best as possible.
Sub-distributors with free@home devices should be either locked, or located in room to which
only authorized persons have access.
Twisted Pair cabling
The cable ends of the free@home Twisted Pair cable should not be visible or project out
■
from the wall, neither inside nor outside the building.
Bus lines in outdoor areas or in areas with limited protection represent an increased risk.
■
Here the physical access to the free@home Twisted Pair cable should be mad exceptionally
difficult.
IP cabling within the building
The local network serves as a sensitive component for secure communication. Therefore,
unauthorized access to the local network must be prevented. As a result, the usual security
mechanisms for IP networks must be applied. These are, for example:
Secure encryption of wireless networks.
■
Use of complex passwords and protection of these against unauthorized persons.
■
Physical access to network interfaces (Ethernet interfaces) should only be permitted in
■
protected areas.
MAC filter
■
Connection to the Internet
To prevent malpractice, no router ports from the Internet to the home network may be opened
for free@home components. For secure remote access a VPN tunnel or the myBUSCH-
JAEGER Portal / MyBuildings Portal can be used.
Product manual 2CKA001473B9726
Safety
│8