Towards Enhancing Security of ICS: System Architecture Development using the Asset Administration Shell

Abstract

Considering security when designing a system is of utmost importance. Integrating security attributes during the design phase provides effective means. However, this process necessitates the collection and utilization of various types of data related to each asset, which should be collected from different sources, such as data sheets. Developing Industrial Control System (ICS) architecture, as an important activity during design time, enhances security by identifying threats, enforcing controls, enabling compliance, resilience, and monitoring through structured, layered design. Thus, this paper explores the incorporation of a Digital Twin into system architecture to improve the security of ICSs. In particular, we investigate the role of the Asset Administration Shell (AAS) as a standardized meta-model in providing necessary information for the development of secure system architectures. After identifying the information required for specific security activities, the current state of AAS and its capability to provide that information is assessed.