IEC TR 62443-3-1 : 1.0

INDUSTRIAL COMMUNICATION NETWORKS - NETWORK AND SYSTEM SECURITY - PART 3-1: SECURITY TECHNOLOGIES FOR INDUSTRIAL AUTOMATION AND CONTROL SYSTEMS

International Electrotechnical Committee

More details

More info

FOREWORD INTRODUCTION 1 Scope 2 Normative references 3 Terms, definitions and acronyms    3.1 Terms and definitions    3.2 Acronyms 4 Overview 5 Authentication and authorization technologies    5.1 General    5.2 Role-based authorization tools    5.3 Password authentication    5.4 Challenge/response authentication    5.5 Physical/token authentication    5.6 Smart card authentication    5.7 Biometric authentication    5.8 Location-based authentication    5.9 Password distribution and management technologies    5.10 Device-to-device authentication 6 Filtering/blocking/access control technologies    6.1 General    6.2 Network firewalls    6.3 Host-based firewalls    6.4 Virtual Networks 7 Encryption technologies and data validation    7.1 General    7.2 Symmetric (secret) key encryption    7.3 Public key encryption and key distribution    7.4 Virtual private networks (VPNs) 8 Management, audit, measurement, monitoring, and    detection tools    8.1 General    8.2 Log auditing utilities    8.3 Virus and malicious code detection systems    8.4 Intrusion detection systems (IDS)    8.5 Vulnerability scanners    8.6 Forensics and analysis tools (FAT)    8.7 Host configuration management tools (HCM)    8.8 Automated software management tools (ASM) 9 Industrial automation and control systems computer    software    9.1 General    9.2 Server and workstation operating systems    9.3 Real-time and embedded operating systems    9.4 Web technologies 10 Physical security controls    10.1 General    10.2 Physical protection    10.3 Personnel security Annex A (informative) Trade name declarations Bibliography

Abstract

Gives a current assessment of various cybersecurity tools, mitigation counter-measures, and technologies that may effectively apply to the modern electronically based IACSs regulating and monitoring numerous industries and critical infrastructures.