CIP Security

Securely Connect Your Data and Devices

Man in a manufacturing setting, wearing a hard hat and orange safety vest while looking at a laptop. The information he is seeing is being shown in front of him.

Securely Connect Your Data and Devices

Common Industrial Protocol (CIP™) Security is an open-standard secure communication protocol developed by ODVA for EtherNet/IP™ communications, providing the final layer of defense for protection against malicious communication attacks.

CIP Security™ can play an important part of a defense in depth strategy, helping to fortify control system cybersecurity by providing data authenticity, integrity, and confidentiality by:

Using Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) cryptographic protocols providing secure transport of EtherNet/IP traffic
Using keyed-Hashed Message Authentication Code (HMAC) providing data integrity and message authenticity
Using X.509v3 Digital Certificates providing cryptographically secure identities to devices

Protection with Security

More than one-third of exploitation of inadvertent weaknesses involve Man in the Middle (MitM) attacks to steal information or change asset configurations. MitM attacks "intercept" communications to alter or steal information.

Video

CIP Security Demonstration

Watch this demonstration of how CIP Security interrupts Man in the Middle (MitM) attacks to protect physical assets.

Video

Understanding CIP Security

CIP Security enabled devices can play an important part in a defense in depth strategy. Watch this video showing how CIP Security works to make products more secure.

Deploying CIP Security within a Converged Plantwide Ethernet Architecture

Converged Plantwide Ethernet (CPwE) is a collection of architected, tested, and validated designs consisting of documented architectures, best practices, guidance, and configuration settings.

This document provides a comprehensive explanation of the CIP Security application design. It includes information about key requirements, possible deployment models, potential challenges, technology considerations, and guidelines for implementation and configuration of these specific use security cases.

Deploy CIP Security within a CPwE Architecture

Two men in a manufacturing setting, wearing hard hats, safety glasses, and manufacturing uniforms looking at a laptop together.

Technical Data

Deploy CIP Security within a CPwE Architecture

See our IEC 62443-based security architecture use cases for designing and deploying CIP Security™ technology across plant-wide or site-wide IACS applications.

Download Now