Abstract: A method for checking an execution of a bytecode instruction of a safety program comprises: executing the bytecode instruction in a virtual machine; and checking by means of the virtual machine whether the bytecode instruction was executed correctly.

Abstract: An apparatus for use in an industrial environment, in particular an industrial machine, for the secure processing of data within a software container environment includes a data generating unit for generating application data and a data processing unit for processing the application data. The data processing unit, as a runtime environment, is configured to allow a plurality of logic modules to run on the data processing device. The logic modules include: at least one application module for executing at least one application using the application data and is configured to generate state data associated with the application; an adaptation module configured to receive the state data and to convert the state data into a format that is processable for a safety monitoring module configured to receive the converted state data from the adaptation module and to determine whether an error state exists on the basis of the converted state data.

Abstract: An industrial system comprises: a sensor and/or an actuator; a safety apparatus configured to execute a safety program for controlling the sensor and/or the actuator; and an update device configured: to obtain update information; to evaluate the update information; based on the evaluation, to determine whether the update information can be applied to the safety program; and, based on the determination, either to apply the update information to the safety program or to discard the update information.

Abstract: A safety device for monitoring at least one machine is provided that has at least one sensor for generating sensor data on the machine and a processing unit for the sensor data that is connected at least indirectly to the sensor and to the machine, that is configured as a performance environment having at least one computing node that is configured to allow a plurality of logic units to run on the at least one computing node, wherein at least one logic unit is configured as a safety function unit for a safety directed evaluation of the sensor data and at least one logic unit is configured as a diagnostic unit for monitoring the at least one safety function unit, In this respect the at least one safety function unit is configured to transmit status reports and performance reports to the diagnostic unit and the diagnostic unit is configured to recognize a safety related malfunction of the safety device in a status monitoring using statuses from the status reports and in a performance monitoring using the perfor