System and method for enabling data to be transmitted between program modules based on compliance with rules

A system for enabling data to be transmitted between program modules based on compliance with rules, the system comprising:

• a hardware processor executing a security module configured to:
• monitor an interaction between a first program module and a second program module to determine whether the interaction complies with at least one rule, wherein the first program module is a source of data being exchanged with the second program module which is a recipient of the data, wherein the first program module and the second program module are segregated to include, respectively, a first code and data segment and a second code and data segment, wherein the segregation is based on at least one of:
• the first code and data segment being for an execution of a first function and the second code and data segment being for an execution of a different second function,
• the first code and data segment and the second code and data segment having different vulnerabilities,
• the first code and data segment and the second code and data segment having different criticality for an execution system of a Programming Logic Controller (PLC);
• when the interaction does not comply with the at least one rule, modify the data being exchanged between the source and the recipient of the data, wherein the modification changes a format of the data being exchanged to a format defined by the security module, the format specifying, in an interface definition language selected by the security module, structures of messages being exchanged for the interaction between the first program module and the second program module and fields of the messages;
• and
• when the interaction complies with the at least one rule, allow the data to be transmitted to the recipient.

A non-transitory computer readable medium storing thereon computer executable instructions for enabling data to be transmitted between program modules based on compliance with rules, including instructions for:

• monitoring, by a security module executable by a processor, an interaction between a first program module and a second program module to determine whether the interaction complies with at least one rule, wherein the first program module is a source of data being exchanged with the second program module which is a recipient of the data, wherein the first program module and the second program module are segregated to include, respectively, a first code and data segment and a second code and data segment, wherein the segregation is based on at least one of:
• the first code and data segment being for an execution of a first function and the second code and data segment being for an execution of a different second function,
• the first code and data segment and the second code and data segment having different vulnerabilities,
• the first code and data segment and the second code and data segment having different criticality for an execution system of a Programming Logic Controller (PLC);
• when the interaction does not comply with the at least one rule, modifying the data being exchanged between the source and the recipient of the data, wherein the modification changes a format of the data being exchanged to a format defined by the security module, the format specifying, in an interface definition language selected by the security module, structures of messages being exchanged for the interaction between the first program module and the second program module and fields of the messages;
• and
• when the interaction complies with the at least one rule, allowing the data to be transmitted to the recipient.