TY - CHAP A1 - Schwind, Philipp A1 - Frauenschläger, Tobias A1 - Mottok, Jürgen T1 - Implementation of a Bump-in-the-Wire Security Gateway T2 - Proceedings of the 12th Prague Embedded Systems Workshop, June 27 - 29, 2024, Horoměřice, Czech Republic N2 - In the face of escalating cyber threats, the integration of Operational Technology (OT) with Information Technology (IT) systems presents heightened vulnerabilities to critical infrastructures. This paper focuses on the need for cybersecurity, showcasing the design and implementation of a security gateway to achieve bump-in-the-wire security between two units to be protected (assets). For that, each asset is assigned one security module that safeguards its communication paths. To ease bump-in-the-wire capability, the communication between the asset and the security-gateway must be stateless and operate on OSI layer 2. This is necessary to safeguard the whole communication bandwidth, regardless of the used protocols. For this objective, Linux-based packet sockets are used. An encrypted tunnel is established between two security gateways using the Datagram Transport Layer Security (DTLS) protocol. The results show that the implemented solution is capable of securing the asset’s network traffic without the need of any modifications. Y1 - 2024 UR - https://pesw.fit.cvut.cz/2024/PESW_2024.pdf SN - 978-80-01-07303-2 SP - 26 EP - 35 ER -