The purpose of cyber security is to protect your systems from external attacks. Those can be in the form of physical access to system hardware, as well as via malicious data, network access, and code injection. The field is of growing importance due to increasing reliance on computer systems for the control and operation of systems.

• Cybercrime continues to be on the rise and cause massive damage.
• Cyber-attacks compromise safety. This is particularly crucial in mission critical applications.
• Cyber-attacks cause financial damage, be it through system downtime or ransomware.
• Cyber-attacks cause reputational damage. Loss of sensitive data is never a good sign

duagon offers a comprehensive set of services along the entire product life cycle.

The evaluation of a project with cyber security features follows similar process steps like a standard customization project for duagon products. The process for an individual project can be accelerated when train builder specific security concepts have been pre-defined.

• At the beginning of your project, duagon will help to define appropriate security level for your specific use case, offer general cyber security consultancy, as well as initial threat & risk analysis.
• The design process follows IEC 62443 and makes use of our duagon secure product development platforms which include secure coding, product hardening, penetration tests, user account management, setup & maintenance of Public Key Infrastructure (PKI), security documentation, and the setup of vulnerability watch.
• Production will take place in duagon’s inhouse cyber-secure factories.
• The delivery of your products will be secured by tamper detection through SW integrity checks. You will also receive a security manual.
• Once your product is put into operation, duagon’s vulnerability watch will monitor the security status of all 3rd party components and detected issues in own components. Depending on the features package implemented various services help maintain a secure operation like security audit logging, centralized user management or secure firmware update and firewall functionality. Additionally, duagon offers software security updates to close known security vulnerabilities.
• At the end of your product’s life-cycle, duagon will take care of secure and verifiable deletion of sensitive data and disposal of hardware according to environmental regulations.

duagon's standard cyber security offering is tailored to the risk exposure of your device. Train builder specific feature packages are available.

• Unprotected Product: Standard product with partial features for cyber security and potentially a Security Manual.
• Basic Package (Cyber Security Essentials): may include duagon key management and standard user profiles, authentication, signed firmware releases, and vulnerability management solution (elements to reach SL1)
• Extended Package (Standalone Device Cyber Security): may include customer specific key management and user profiles, device hardening, signed firmware, audit logging, generic threat and risk analysis, and penetration tests (elements to reach SL2)

Advanced Package (Integrated Cyber Security Solutions): may include centralized user authentication and system logging, managed firewalls, deep package inspection, specific vulnerability tests, key & certificate management based on an application specific threat, and risk analysis (elements to reach SIL3)

The IEC 62443 standard defines security levels on a five-point scale (0, 1, 2, 3 and 4), each of which represents an incremental level in terms of cybersecurity measures.

• SL1 can be covered by the duagon Cyber Security Basic Package elements
• SL2 can be covered by the duagon Cyber Security Extended Package elements
• SL3 can be covered by the duagon Cyber Security Advanced Package elements with customizations
• SL4 may be offered in the scope of a customer specific project

duagon’s vulnerability watch monitors the security status of all components used in the products, including 3rd party components. All weaknesses found will be documented, rated and reported along with proposed measures in a Security Manual for each product. This service requires a service contract with annual fee for the product.

We have a growing number of products which offer security elements that cover your need for protection against cyber security threats. This ranges from computing hardware platforms to complete solutions like gateways or remote IO products.