Cyber Security Defense in Depth

Ekip Connect implements a Defense in Depth security approach, a multi-layered strategy that combines multiple security controls and mechanisms to protect the application, data, and communications. This approach ensures that even if one security layer is compromised, additional layers provide continuous protection against threats.

The following security capabilities form the foundation of Ekip Connect's Defense in Depth strategy:

Authentication & Authorization

OAuth2 authentication protocol; Role-based access control (standard & advanced profiles); Password-protected operations

Threat mitigated: Unauthorized access, Privilege escalation, Account hijacking

Secure Communication

HTTPS (443/TCP) for cloud connectivity; Encrypted data exchange with ABB ELSP Digital Manager and ABB Ability Platform; Certificate-based authentication

Threat mitigated: Man-in-the-middle attacks, Data interception, Eavesdropping

Session Management

30-day authentication validity; Automatic session timeout; Secure token management for cloud services

Threat mitigated: Session hijacking, Unauthorized session access, Token theft

Data Protection

Encrypted storage of configurations & credentials; Digitally signed firmware updates; Protected data logging

Threat mitigated: Data breach, Unauthorized data access, Firmware tampering

Network Security

Local and remote operation modes; Configurable communication protocols

Threat mitigated: Unauthorized network access, Lateral movement attacks