On the Security of IO-Link Wireless Communication in the Safety Domain

TL;DR

This paper analyzes the security vulnerabilities of IO-Link Wireless in industrial environments, evaluates potential security measures, and discusses how to enhance the protocol's security while considering safety requirements.

Contribution

It provides a comprehensive attack surface analysis of IO-Link Wireless and evaluates security enhancements compatible with safety principles.

Findings

Identified key attack vectors in IO-Link Wireless

Assessed effectiveness of proposed security measures

Discussed compatibility of security and safety requirements

Abstract

Security is an essential requirement of Industrial Control System (ICS) environments and its underlying communication infrastructure. Especially the lowest communication level within Supervisory Control and Data Acquisition (SCADA) systems - the field level - commonly lacks security measures. Since emerging wireless technologies within field level expose the lowest communication infrastructure towards potential attackers, additional security measures above the prevalent concept of air-gapped communication must be considered. Therefore, this work analyzes security aspects for the wireless communication protocol IO-LinkWireless (IOLW), which is commonly used for sensor and actuator field level communication. A possible architecture for an IOLW safety layer has already been presented recently [1]. In this paper, the overall attack surface of IOLW within its typical environment is analyzed and attack preconditions are investigated to assess the effectiveness of different security measures. Additionally, enhanced security measures are evaluated for the communication systems and the results are summarized. Also, interference of security measures and functional safety principles within the communication are investigated, which do not necessarily complement one another but may also have contradictory requirements. This work is intended to discuss and propose enhancements of the IOLW standard with additional security considerations in future implementations.