Through the device passthrough feature of TwinCAT/BSD Hypervisor, hardware resources such as the GPU, USB ports and/or network interfaces can be explicitly assigned to a virtual machine. In this way, access to the TwinCAT/BSD system by user and/or network interfaces can be limited, creating opportunities to boost control system security.