Contact Global | English

Global sites

        Data Capture Unit (DCU)

        Cybersecurity and adoption of digital apps and services are leading to an increasing need to capture data from critical and secure industrial networks.

        Facing growing cybersecurity threats, monitoring of critical networks for intrusion and anomaly detection (as well as passive asset discovery) becomes ever more important. At the same time, with the rise of apps and services, critical infrastructure operators can benefit from remote condition monitoring, management services and data analytics. Both, network security monitoring and the use of apps and services require safe access to critical networks. DCU provides a trustworthy one-way flow of data from critical OT networks to open networks, while keeping critical infrastructure assets secure.

        Learn more about how to protect critical networks

        Download our whitepaper
        General Overview

        Data Capture Unit – Enhancing the first line of defense

        Digital connectivity is making our lives easier and boosting business competitiveness. The flip side: The growing danger of cyber-attacks which could cause critical disruptions. Our new data diode enables companies to make full use out of their digital potential, while securely connecting their networks to the cloud. 
        Product information

        Sharing and monitoring data from critical networks without compromising security

        Traditionally, critical industrial control systems are protected either by a firewall or by an air-gap, meaning they are completely isolated from the remaining network. Both have significant shortcomings as an air-gap does not allow the real-time flow of information while firewalls are susceptible to misconfiguration and back doors. A DCU is a far better way to keep a critical network safe while granting limited access. It is a one-way transfer device that permits data to be sent from the critical network for monitoring or use by a remote user, without allowing a potential entry point or attack vector into the critical network.

        Main benefits

        • DCU enables secure and continuous monitoring of critical industrial networks
        • DCU keeps critical and open networks physically separated
        • No need to re-configure the critical network for monitoring
        • No impact on network operation even if the DCU stops working or loses power
           

        Main features

        • Monitoring is independent of the protocol used
        • Supports network tap and one-way gateway operation using gateway applications
        • Filtering of captured data by protocol, source or target IP, source or target port, and data content
        • Designed for operation in rugged environmental conditions
        Applications

        DCU enables secure monitoring for various applications

        Intrusion detection system (IDS)

        An intrusion detection system (IDS) is a network

        security technology for detecting vulnerability

        exploits against a target network. The ability to

        set up a trustworthy network connection using a

        DCU allows intrusion detection systems to monitor

        critical networks for detection of abnormal and/or

        malicious activities. The DCU provides for passive,

        unidirectional data capture with no interference to

        the network.

        Juridical recording system (JRS)

        A juridical recording system (JRS) provides long

        term storage of network data for future analysis in

        a forensic or legal investigation. A DCU allows the

        collection of data at the earliest possible point while

        ensuring privacy and data integrity thanks to the

        use of TLS-secured connections. For each record

        captured, it is possible to prove that a specific

        DCU captured the data and that it has not been

        manipulated.

        Remote monitoring and diagnosis

        Businesses need to extract valuable data from

        critical industrial control systems (such as factories,

        plants, trains, railway signaling systems, etc) for

        remote condition monitoring, management services

        and to improve efficiency through data analytics.

        Operating as a network tap or a sophisticated

        one-way gateway supporting application specific

        protocols, the DCU provides a trusted connection

        to access critical networks without introducing

        accessible and exploitable vulnerabilities.

        Modes of operation

        DCU modes of operation

        With its various modes of operation a DCU meets different requirements in terms of data flow and network setups.
        The DCU simply taps into traffic on a specific link between network devices and captures this data. Tap mode enables easy integration as the DCU does not interfere with the critical network.
        Termination mode ends a connection in the DCU and enables capturing of specifically addressed one-way communication. Live data can be monitored or stored locally for offline processing.
        Two-way communication is enabled through the one-way gateway application, emulating feedback messages. Tap mode and a virtual dummy server are used when broadcasting is not possible.
        In termination mode data is sent to a specific receiver. Acknowledging mode enables the receiver outside the critical network to provide a very simple acknowledgment of receipt of data.
        Some situations require the ability to securely load data, e.g. config files, into the critical network while still ensuring a oneway flow of data out of the critical network.
        Product features

        DCU adheres to the principle of freedom from interference

        Passive connection to the network segment

        The DCU uses passive connections to tap into a

        segment of a critical network so as to unobtrusively

        monitor a full-duplex data stream independent of

        the protocol used. The DCU is not detectable on the

        network nor will the network be disrupted should

        the DCU fail. The DCU may be removed or serviced

        without impacting the traffic in the critical network.

        No direct conduction path

        The DCU ensures that there is no direct conduction

        path between the critical network being monitored

        and the open network. Galvanic isolation between

        the critical and open networks prevents errant or

        unwanted electrical current that could disrupt or

        damage the critical network.

        No physical transmit connection

        For each critical network segment monitored by the

        DCU, the transmit driver of the Ethernet physical

        layer implementation is not connected. In fact, the

        transmit connection is not even addressed. This

        makes it physically impossible to interfere with

        or transmit to the critical network segment being

        monitored.

        Essential information at a glance

        Download product data sheet

        Would you like to know more?

        With our long-standing transport expertise and IT know-how, we are constantly developing new, intelligent mobility solutions that electrify, automate and digitalize infrastructure. Download more information here.

        Data sheet

        Article - The application of Smart Data Services in interlocking systems

        Article - Monitoring safety-critical railway networks using unidirectional gateways

        Download

        Whitepaper

        Are you interested in our white paper on cybersecurity? Fill-in the following form and get access to it

        Contact

        Get in touch

        For additional information about the Data Capture Unit or any of our other products or services, please contact our experts who will be pleased to assist you.

        Contact us

        This might also interest you

        Engineers Of Next

        Digitalization is changing mobility as we know it. Siemens Mobility creates a digitally connected mobility universe.

        MindSphere – open IoT operating system

        MindSphere is the cloud-based, open IoT operating system from Siemens that connects your products, plants, systems, and machines, enabling you to harness the wealth of data generated by the Internet of Things (IoT) with advanced analytics.

        Enhanced travel comfort through digitalization

        Passengers today want more than to just travel quickly from point A to B. Innovative technologies from Siemens provide cities and operators with the ideal foundation for new mobility services.

        Siemens Mobility

        Siemens Mobilty offers intelligent and efficient mobility solutions for urban, interurban and freight transportation.