APPENDIX B
SECURITY STANDARDS IN USE IN ETHERNET INSTALLATIONS
The protocols and standards listed below are readily available components that can be used to implement secure Ethernet networks in factories, power substations and other industrial sites.
SNMP
Simple Network Management Protocol, introduced in 1988, is a standard for gathering and managing statistical data about network traffic and the behavior of network components such as switches, hubs, routers and any device which is SNMP enabled. It is based on the manager/agent model and is used in TCP/IP and other networks to monitor and control network devices, and manage configurations, statistics collection, and performance. It is easy to implement, install, and use, and does not place undue burden on the network. Even better, SNMP modules from different vendors work together with minimal effort. However, early versions of SNMP did not adequately address the issue of security.
Basic security, in the form of authentication and encryption, was first proposed in 1998 with SNMPv3. Accepted as a full Internet standard in 2002, SNMPv3 assures that a received message was transmitted by the entity whose identifier appears as the source in the message header, it assures that the message was not altered in transit and that there was not artificial delay or replay. It also provides for the ability to update configuration parameters in SNMP agents, thus enabling complete remote management of SNMP devices, which is an added convenience as Web management comes into play.
It is important to note that SNMPv3 adds several levels of capability, and increasing complexity, to an SNMP implementation. Unless an implementation requires security features, most SNMP deployments will remain at SNMPv1 or SNMPv2. Perhaps the wisest approach for a vendor of Ethernet switches is to continue to offer these earlier versions, as well as SNMPv3, in its network management package to accommodate users with various levels of security requirements.
Communicating SNMPv3 engines share a secret authentication key that is provided by the sending entity. When the receiving entity gets the message, it uses the same secret key to calculate the message authentication code again. If the receiver’s version of the code matches the value appended to the incoming message, then the receiver knows that the message can only have originated from the
9