TY - CHAP A1 - Frauenschläger, Tobias A1 - Renner, Sebastian A1 - Mottok, Jürgen T1 - Security Improvements by Separating the Cryptographic Protocol from the Network Stack onto a Multi-MCU Architecture T2 - Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings N2 - The number of IoT devices in SCADA and ICS systems is rising quickly, especially in the domain of critical infrastructures. But these kinds of systems are performing mission critical tasks like controlling devices in industrial facilities or substations in the smart grid. Therefore, they are subject to a lot of regulatory standards. Yet, to provide remote access over the internet, special architectures are developed to integrate a network interface into these devices without inferring with the actual functionality. However, these architectures either lack security measures against cyber-attacks or do not offer the necessary performance for time-critical communication interfaces. To solve that, an architecture consisting of three units is introduced in this paper to provide a network interface with extensive security measures and a high performance. The main feature is the isolation of the cryptographic functionality onto an additional MCU. After proposing the basic concept, the paper presents many implementation details. Based on the current state of implementation, a concept validation of the realized architecture is described. KW - Cyber-security KW - Functional safety KW - Network security KW - Industrial Internet of Things KW - Industrial Control System KW - Supervisory Control and Data Acquisition System Multi microcontroller setup Dos prevention Critical infrastructures KW - Multi microcontroller setup Dos prevention Critical infrastructures KW - Dos prevention KW - Critical infrastructures Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_14 SP - 185 EP - 199 PB - Springer International Publishing ER -