{"id":"https://openalex.org/W7135062909","doi":"https://doi.org/10.3390/jcp6020052","title":"Security Aspects of Zones and Conduits in IEC 62443","display_name":"Security Aspects of Zones and Conduits in IEC 62443","publication_year":2026,"publication_date":"2026-03-12","ids":{"openalex":"https://openalex.org/W7135062909","doi":"https://doi.org/10.3390/jcp6020052"},"language":"en","primary_location":{"id":"doi:10.3390/jcp6020052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp6020052","pdf_url":"https://www.mdpi.com/2624-800X/6/2/52/pdf?version=1773325834","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/6/2/52/pdf?version=1773325834","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071836226","display_name":"Martin Gilje Jaatun","orcid":"https://orcid.org/0000-0001-7127-6694"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Martin Gilje Jaatun","raw_affiliation_strings":["Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0001-7127-6694","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway","institution_ids":["https://openalex.org/I173888879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039269794","display_name":"Mary Ann Lundteigen","orcid":"https://orcid.org/0000-0002-9045-6815"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Mary Ann Lundteigen","raw_affiliation_strings":["Department of Engineering Cybernetics, Norwegian University of Science and Technology, 7491 Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0002-9045-6815","affiliations":[{"raw_affiliation_string":"Department of Engineering Cybernetics, Norwegian University of Science and Technology, 7491 Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062248987","display_name":"Christoph Thieme","orcid":"https://orcid.org/0000-0003-1853-0950"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Christoph Thieme","raw_affiliation_strings":["Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0003-1853-0950","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway","institution_ids":["https://openalex.org/I173888879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088242730","display_name":"Lars Halvdan Fl\u00e5","orcid":"https://orcid.org/0000-0002-3069-6788"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Lars Halvdan Fl\u00e5","raw_affiliation_strings":["Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0002-3069-6788","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway","institution_ids":["https://openalex.org/I173888879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054254915","display_name":"Karin Bernsmed","orcid":"https://orcid.org/0000-0001-9109-5401"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Karin Bernsmed","raw_affiliation_strings":["Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0001-9109-5401","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Safety and Security, SINTEF Digital, P.O. Box 4760, Torgarden, 7465 Trondheim, Norway","institution_ids":["https://openalex.org/I173888879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128876548","display_name":"Roald Lygre","orcid":null},"institutions":[{"id":"https://openalex.org/I4210146851","display_name":"Aker BP (Norway)","ror":"https://ror.org/05g9srn20","country_code":"NO","type":"company","lineage":["https://openalex.org/I4210095065","https://openalex.org/I4210146851"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Roald Lygre","raw_affiliation_strings":["Aker BP, P.O. Box 480, Sentrum, 4002 Stavanger, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aker BP, P.O. Box 480, Sentrum, 4002 Stavanger, Norway","institution_ids":["https://openalex.org/I4210146851"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5117249706","display_name":"Fredrik Gratte","orcid":null},"institutions":[{"id":"https://openalex.org/I186414734","display_name":"University of Pinar del R\u00edo","ror":"https://ror.org/007chxf81","country_code":"CU","type":"education","lineage":["https://openalex.org/I186414734"]}],"countries":["CU"],"is_corresponding":false,"raw_author_name":"Fredrik Gratte","raw_affiliation_strings":["Atina, \u00d8konomisenteret, P.O. Box 70, 3441 R\u00f8yken, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Atina, \u00d8konomisenteret, P.O. Box 70, 3441 R\u00f8yken, Norway","institution_ids":["https://openalex.org/I186414734"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5039269794","https://openalex.org/A5071836226"],"corresponding_institution_ids":["https://openalex.org/I173888879","https://openalex.org/I204778367"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1114},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1114},"fwci":5.3132,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.94571798,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"6","issue":"2","first_page":"52","last_page":"52"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9165999889373779,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9165999889373779,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11741","display_name":"Flexible and Reconfigurable Manufacturing Systems","score":0.02630000002682209,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.007899999618530273,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5515000224113464},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.48890000581741333},{"id":"https://openalex.org/keywords/electrical-conduit","display_name":"Electrical conduit","score":0.47870001196861267},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.30329999327659607},{"id":"https://openalex.org/keywords/legacy-system","display_name":"Legacy system","score":0.287200003862381},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.28600001335144043}],"concepts":[{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5515000224113464},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.48890000581741333},{"id":"https://openalex.org/C89836073","wikidata":"https://www.wikidata.org/wiki/Q1719631","display_name":"Electrical conduit","level":2,"score":0.47870001196861267},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4674000144004822},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.43950000405311584},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.3617999851703644},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3154999911785126},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.30329999327659607},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.287200003862381},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.28600001335144043},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C21457203","wikidata":"https://www.wikidata.org/wiki/Q4056293","display_name":"Process automation system","level":3,"score":0.2727999985218048},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.2522999942302704},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.25029999017715454}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp6020052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp6020052","pdf_url":"https://www.mdpi.com/2624-800X/6/2/52/pdf?version=1773325834","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:aab633e54c534767871a34bf6b844af7","is_oa":true,"landing_page_url":"https://doaj.org/article/aab633e54c534767871a34bf6b844af7","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 6, Iss 2, p 52 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp6020052","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp6020052","pdf_url":"https://www.mdpi.com/2624-800X/6/2/52/pdf?version=1773325834","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4113215208053589}],"awards":[{"id":"https://openalex.org/G8179350644","display_name":null,"funder_award_id":"326717","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"},{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7135062909.pdf","grobid_xml":"https://content.openalex.org/works/W7135062909.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"IEC":[1],"62443":[2],"standard":[3],"defines":[4],"that,":[5],"based":[6],"on":[7],"risk":[8],"assessment,":[9],"different":[10,22,42,95],"parts":[11,27],"of":[12,69,103,115],"an":[13],"Industrial":[14],"Automation":[15],"and":[16,25,46,60,72,107,117],"Control":[17],"System":[18],"(IACS)":[19],"may":[20],"have":[21],"security":[23,31],"levels,":[24],"that":[26,58],"with":[28,93],"the":[29,101,113],"same":[30],"level":[32],"can":[33,48,63],"be":[34,49],"designated":[35],"as":[36,75],"separate":[37],"zones.":[38],"Furthermore,":[39],"communication":[40],"between":[41],"zones,":[43],"both":[44],"intra-IACS":[45],"inter-IACS,":[47],"done":[50],"via":[51],"conduits.":[52],"In":[53],"this":[54],"article,":[55],"we":[56,78],"argue":[57],"zones":[59,92,116],"particularly":[61],"conduits":[62,118],"benefit":[64],"from":[65],"more":[66],"detailed":[67,81],"discussions":[68],"their":[70],"architecture":[71],"implementation.":[73],"Consequently,":[74],"novel":[76],"contributions":[77],"(1)":[79],"describe":[80],"principles":[82],"for":[83,90],"implementing":[84],"conduits;":[85],"(2)":[86],"outline":[87],"a":[88,104],"process":[89],"connecting":[91],"potentially":[94],"Security":[96],"Levels":[97],"(SLs),":[98],"expressed":[99],"in":[100,119],"form":[102],"flow":[105],"chart;":[106],"(3)":[108],"discuss":[109],"challenges":[110],"related":[111],"to":[112],"application":[114],"practice.":[120]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-03-13T00:00:00"}