Security with COTS Technologies

Abstract

The use of commercial off-the-shelf (COTS) technologies in automation opens new possibilities for intelligent production processes, but also brings new information security risks. For achieving an adequate protection, a risk based approach is required, which is in some cases complex and time-consuming. In this article, we present the basic idea behind a reference-model based approach that supports the operating company in identification, evaluation, and reduction of information security risks. The approach reduces the time and effort for risk management. We describe the functionality and the practical use of the reference model by using an example of a wireless communication technology.