Glossary · Industrial cybersecurity
Conduit
German: Conduit
In industrial cybersecurity under IEC 62443, a conduit is a controlled communication path between security zones. It groups the channels that connect zones and has its own security requirements, such as filtering, authentication and monitoring.
- Cybersecurity
- Standards
In one sentence
A conduit in IEC 62443 is a controlled communication path between security zones, with its own security requirements.
Example
The link between the robot cell network and the plant MES runs through a conduit made of a firewall that only allows OPC UA traffic from two named servers.
How it applies
- Cybersecurity: The zone and conduit model is defined in the risk assessment part of IEC 62443. Every communication between security zones should go through a documented conduit; undocumented connections, such as a service modem, bypass the model.
- Integrated systems: When machines are combined into a production line, the integrator defines conduits between machine networks and the plant network. The machine builder should document which interfaces exist and what traffic they need.
- Technical documentation: A conduit description lists endpoints, protocols, directions, protection measures and the owner. It belongs in the security documentation handed over to the operator.
- Machine safety: Safety-relevant data crossing a conduit is a safety-security interface and needs attention from both disciplines.
Conduit vs. channel
A channel is a single communication link, for example one protocol connection. A conduit is the logical grouping of channels between zones, with common security requirements. Several channels can share one conduit.