EP 3417589 A1 20181226 - REDUCING A POSSIBLE ATTACK ON A WEAK POINT OF A DEVICE VIA A NETWORK ACCESS POINT
Title (en)
REDUCING A POSSIBLE ATTACK ON A WEAK POINT OF A DEVICE VIA A NETWORK ACCESS POINT
Title (de)
REDUZIEREN EINER ANGRIFFSMÖGLICHKEIT AUF EINE SCHWACHSTELLE EINES GERÄTES ÜBER EINE NETZWERKZUGANGSSTELLE
Title (fr)
RÉDUCTION DE LA CAPACITÉ D'ATTAQUE D'UN POINT FAIBLE D'UN APPAREIL PAR LE BIAIS D'UN POINT D'ACCÈS À UN RÉSEAU
Publication
Application
Priority
- DE 102016205321 A 20160331
- EP 2017053107 W 20170213
Abstract (en)
[origin: WO2017167490A1] A method for reducing a possible attack on a weak point of a device via a network access point to a network is proposed, wherein a configuration of the device is analysed in a first step, wherein communication via the network access point is restricted by a network access filter with the aid of a selectable filter rule in a second step if a weak point is detected on the basis of the analysed configuration, in particular a lack of up-to-dateness of the configuration, and wherein the filter rule is topologically applied between the network access point and a main function of the device. A corresponding device and a computer program product are proposed. A type of reverse network admission control principle is therefore applied. In the case of a weak configuration or a configuration which is presumed not to be up-to-date, a field device itself restricts its communication by means of a type of reverse network admission control in order to reduce the attack area.
IPC 8 full level
H04L 29/06 (2006.01); G06F 21/57 (2013.01)
CPC (source: EP US)
G06F 21/577 (2013.01 - EP US); H04L 63/0227 (2013.01 - EP US); H04L 63/0823 (2013.01 - US); H04L 63/1433 (2013.01 - EP US); H04L 63/20 (2013.01 - US)
Citation (search report)
See references of WO 2017167490A1
Designated contracting state (EPC)
AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR
Designated extension state (EPC)
BA ME
DOCDB simple family (publication)
WO 2017167490 A1 20171005; CN 109076068 A 20181221; DE 102016205321 A1 20171005; EP 3417589 A1 20181226; US 2019098038 A1 20190328
DOCDB simple family (application)
EP 2017053107 W 20170213; CN 201780020989 A 20170213; DE 102016205321 A 20160331; EP 17706174 A 20170213; US 201716087812 A 20170213