Path:
Home >
GB/T >
Page208 > GB/T 37941-2019
Price & Delivery
US$599.00 · In stock · Download in 9 secondsGB/T 37941-2019: Information security technology - Security technical requirements of industrial control system network audit products
Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See
step-by-step procedureStatus: Valid
| Std ID | Version | USD | Buy | Deliver [PDF] in | Title (Description) |
| GB/T 37941-2019 | English | 599 |
Add to Cart
|
5 days [Need to translate]
|
Information security technology - Security technical requirements of industrial control system network audit products
|
Click to Preview a similar PDF
Basic data
| Standard ID | GB/T 37941-2019 (GB/T37941-2019) |
| Description (Translated English) | Information security technology - Security technical requirements of industrial control system network audit products |
| Sector / Industry | National Standard (Recommended) |
| Classification of Chinese Standard | L80 |
| Classification of International Standard | 35.040 |
| Word Count Estimation | 30,319 |
| Date of Issue | 2019-08-30 |
| Date of Implementation | 2020-03-01 |
| Issuing agency(ies) | State Administration for Market Regulation, China National Standardization Administration |
GB/T 37941-2019: Information security technology - Security technical requirements of industrial control system network audit products
---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GBT37941-2019
(Information Security Technology Industrial Control System Network Audit Product Security Technical Requirements)
ICS 35.040
L80
National Standards of People's Republic of China
Information Security Technology Industrial Control System Network Audit
Product safety technical requirements
Informationsecuritytechnology-Securitytechnicalrequirementsofindustrial
Controlsystemnetworkauditproducts
Published on.2019-08-30
2020-03-01 implementation
State market supervision and administration
China National Standardization Administration issued
Content
Foreword III
Introduction IV
1 Scope 1
2 Normative references 1
3 Terms and Definitions 2
4 Abbreviations 2
5 Product Description 2
6 Safety technical requirements 2
6.1 Basic level safety technical requirements 2
6.1.1 Security function requirements 2
6.1.2 Self-safety requirements 5
6.1.3 Security requirements 6
6.2 Enhanced Security Technical Requirements 8
6.2.1 Security function requirements 8
6.2.2 Self-safety requirements 12
6.2.3 Security requirements 14
Appendix A (informative) Application of Network Control Products for Industrial Control Systems 17
Appendix B (Normative) Environmental Adaptability Requirements 18
Reference 25
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
Please note that some of the contents of this document may involve patents. The issuing organization of this document is not responsible for identifying these patents.
This standard is proposed and managed by the National Information Security Standardization Technical Committee (SAC/TC260).
This standard was drafted. The Third Institute of the Ministry of Public Security, the Network Security Bureau of the Ministry of Public Security, Zhuhai Hongrui Software Technology Co., Ltd., Beijing
Tiandi Hexing Technology Co., Ltd., Shanghai Sanshi Defender Information Security Co., Ltd., Beijing Shenzhou Lvmeng Information Security Technology Co., Ltd.
China Information Security Research Institute Co., Ltd., Beijing Tianrongxin Network Security Technology Co., Ltd., China Electronics Technology Standardization Institute, Jinan
Huahan Electric Technology Co., Ltd., Beijing Heli System Engineering Co., Ltd., Shanghai Electric Power College.
The main drafters of this standard. Zou Chunming, Shen Qingyi, Liu Rui, Lu Yi, Lu Lei, Fan Chunling, Tian Yuan, Meng Shuang, Yu You, Gu Jian, Kang Tianjiao,
Wang Yong, Liu Zhiyong, Chen Minchao, Jin Guangyu, Ni Hua, Ye Xiaohu, Wang Xiaopeng, Zhou Wenqi, Lei Xiaofeng, Fan Kefeng, Yao Xiangzhen, Li Lin, Zhou Ruikang,
Zhu Yiming, Yang Chen.
introduction
With the deep integration of industrialization and informatization, security threats from information networks are gradually causing great security to industrial control systems.
Full-threat, general-purpose security audit products appear to be incapable of facing the security protection of industrial control systems, so there is an urgent need for one that can be applied
Safety audit products for industrial control environments provide safety protection for industrial control systems.
The main differences between security audit products and general security audit products used in industrial control environments are.
---General security audit products are mainly analyzed and recorded for general protocols applied to the Internet. For industrial control environments
In addition to being able to analyze some of the Internet's general protocols, security audit products should also have a deep interpretation of industrial control protocols.
Ability without the need for a general protocol that will not be used in industrial control systems such as email.
--- Security audit products for industrial control environments may have some components deployed in an industrial field environment, so
The product needs to have a higher environmental adaptability.
---In industrial control environment, the flow is usually relatively small, the flow type is relatively fixed, and the reliability is higher. It is used in industrial control loops.
Security audit products support full traffic auditing and require support for whitelisting of audit information
analysis.
Information Security Technology Industrial Control System Network Audit
Product safety technical requirements
1 Scope
This standard specifies the safety technical requirements for industrial control system network audit products, including safety function requirements, their own safety requirements and safety.
Full security requirements.
This standard applies to the design, production and testing of network audit products for industrial control systems.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this article.
Pieces. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 2423.5-1995 Environmental testing for electric and electronic products - Part 2. Test methods Test Ea and guide. Impact
GB/T 2423.8-1995 Environmental testing of electric and electronic products - Part 2. Test method test Ed. Free fall
GB/T 2423.10-2008 Environmental testing of electric and electronic products - Part 2. Test method test Fc. Vibration (sinusoidal)
GB/T 4208-2017 enclosure protection grade (IP code)
GB 4824-2013 Industrial, scientific and medical (ISM) radio frequency equipment disturbance characteristics limits and methods of measurement
GB/T 9254-2008 Radio disturbance limits and methods of measurement for information technology equipment
GB/T 13729-2002 Telecontrol terminal equipment
GB/T 15153.1-1998 Telecontrol equipment and systems - Part 2. Working conditions - Part 1. Power supply and electromagnetic compatibility
GB/T 17214.4-2005 Working conditions for measuring and control devices - Part 4. Corrosion and erosion
GB/T 17626.2-2018 Electromagnetic compatibility test and measurement technology Electrostatic discharge immunity test
GB/T 17626.3-2016 Electromagnetic compatibility test and measurement technology RF electromagnetic field radiation immunity test
GB/T 17626.4-2018 Electromagnetic compatibility test and measurement technology Electrical fast transient burst immunity test
GB/T 17626.5-2008 Electromagnetic compatibility test and measurement technology Surge (impact) immunity test
GB/T 17626.6-2017 Electromagnetic compatibility test and measurement technology Conducted disturbance immunity of RF field induction
GB/T 17626.8-2006 Electromagnetic compatibility test and measurement technology Power frequency magnetic field immunity test
GB/T 17626.10-2017 Electromagnetic compatibility test and measurement technique Damping oscillating magnetic field immunity test
GB/T 17626.11-2008 Electromagnetic compatibility test and measurement techniques Immunity to voltage dips, short interruptions and voltage changes
test
GB/T 17626.12-2013 Electromagnetic compatibility test and measurement technology ringing wave immunity test
GB/T 17626.16-2007 Electromagnetic compatibility test and measurement technology 0Hz~150kHz common mode conducted disturbance immunity test
GB/T 17626.17-2005 Electromagnetic compatibility test and measurement technology DC power input port ripple immunity test
GB/T 17626.18-2016 Electromagnetic compatibility test and measurement technology Damping oscillator wave immunity test
GB/T 17626.29-2006 Electromagnetic compatibility test and measurement technology DC power input port voltage dip, short interruption and
Immunity test for voltage changes
GB/T 20945-2013 Information security technology information system security audit product technical requirements and test evaluation methods
GB/T 25069-2010 Information Security Technology Terminology
GB/T 32919-2016 Information Security Technology Industrial Control System Safety Control Application Guide
GB/T 37941-2019
(Information Security Technology Industrial Control System Network Audit Product Security Technical Requirements)
ICS 35.040
L80
National Standards of People's Republic of China
Information Security Technology Industrial Control System Network Audit
Product safety technical requirements
Informationsecuritytechnology-Securitytechnicalrequirementsofindustrial
Controlsystemnetworkauditproducts
Published on.2019-08-30
2020-03-01 implementation
State market supervision and administration
China National Standardization Administration issued
Content
Foreword III
Introduction IV
1 Scope 1
2 Normative references 1
3 Terms and Definitions 2
4 Abbreviations 2
5 Product Description 2
6 Safety technical requirements 2
6.1 Basic level safety technical requirements 2
6.1.1 Security function requirements 2
6.1.2 Self-safety requirements 5
6.1.3 Security requirements 6
6.2 Enhanced Security Technical Requirements 8
6.2.1 Security function requirements 8
6.2.2 Self-safety requirements 12
6.2.3 Security requirements 14
Appendix A (informative) Application of Network Control Products for Industrial Control Systems 17
Appendix B (Normative) Environmental Adaptability Requirements 18
Reference 25
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
Please note that some of the contents of this document may involve patents. The issuing organization of this document is not responsible for identifying these patents.
This standard is proposed and managed by the National Information Security Standardization Technical Committee (SAC/TC260).
This standard was drafted. The Third Institute of the Ministry of Public Security, the Network Security Bureau of the Ministry of Public Security, Zhuhai Hongrui Software Technology Co., Ltd., Beijing
Tiandi Hexing Technology Co., Ltd., Shanghai Sanshi Defender Information Security Co., Ltd., Beijing Shenzhou Lvmeng Information Security Technology Co., Ltd.
China Information Security Research Institute Co., Ltd., Beijing Tianrongxin Network Security Technology Co., Ltd., China Electronics Technology Standardization Institute, Jinan
Huahan Electric Technology Co., Ltd., Beijing Heli System Engineering Co., Ltd., Shanghai Electric Power College.
The main drafters of this standard. Zou Chunming, Shen Qingyi, Liu Rui, Lu Yi, Lu Lei, Fan Chunling, Tian Yuan, Meng Shuang, Yu You, Gu Jian, Kang Tianjiao,
Wang Yong, Liu Zhiyong, Chen Minchao, Jin Guangyu, Ni Hua, Ye Xiaohu, Wang Xiaopeng, Zhou Wenqi, Lei Xiaofeng, Fan Kefeng, Yao Xiangzhen, Li Lin, Zhou Ruikang,
Zhu Yiming, Yang Chen.
introduction
With the deep integration of industrialization and informatization, security threats from information networks are gradually causing great security to industrial control systems.
Full-threat, general-purpose security audit products appear to be incapable of facing the security protection of industrial control systems, so there is an urgent need for one that can be applied
Safety audit products for industrial control environments provide safety protection for industrial control systems.
The main differences between security audit products and general security audit products used in industrial control environments are.
---General security audit products are mainly analyzed and recorded for general protocols applied to the Internet. For industrial control environments
In addition to being able to analyze some of the Internet's general protocols, security audit products should also have a deep interpretation of industrial control protocols.
Ability without the need for a general protocol that will not be used in industrial control systems such as email.
--- Security audit products for industrial control environments may have some components deployed in an industrial field environment, so
The product needs to have a higher environmental adaptability.
---In industrial control environment, the flow is usually relatively small, the flow type is relatively fixed, and the reliability is higher. It is used in industrial control loops.
Security audit products support full traffic auditing and require support for whitelisting of audit information
analysis.
Information Security Technology Industrial Control System Network Audit
Product safety technical requirements
1 Scope
This standard specifies the safety technical requirements for industrial control system network audit products, including safety function requirements, their own safety requirements and safety.
Full security requirements.
This standard applies to the design, production and testing of network audit products for industrial control systems.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this article.
Pieces. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 2423.5-1995 Environmental testing for electric and electronic products - Part 2. Test methods Test Ea and guide. Impact
GB/T 2423.8-1995 Environmental testing of electric and electronic products - Part 2. Test method test Ed. Free fall
GB/T 2423.10-2008 Environmental testing of electric and electronic products - Part 2. Test method test Fc. Vibration (sinusoidal)
GB/T 4208-2017 enclosure protection grade (IP code)
GB 4824-2013 Industrial, scientific and medical (ISM) radio frequency equipment disturbance characteristics limits and methods of measurement
GB/T 9254-2008 Radio disturbance limits and methods of measurement for information technology equipment
GB/T 13729-2002 Telecontrol terminal equipment
GB/T 15153.1-1998 Telecontrol equipment and systems - Part 2. Working conditions - Part 1. Power supply and electromagnetic compatibility
GB/T 17214.4-2005 Working conditions for measuring and control devices - Part 4. Corrosion and erosion
GB/T 17626.2-2018 Electromagnetic compatibility test and measurement technology Electrostatic discharge immunity test
GB/T 17626.3-2016 Electromagnetic compatibility test and measurement technology RF electromagnetic field radiation immunity test
GB/T 17626.4-2018 Electromagnetic compatibility test and measurement technology Electrical fast transient burst immunity test
GB/T 17626.5-2008 Electromagnetic compatibility test and measurement technology Surge (impact) immunity test
GB/T 17626.6-2017 Electromagnetic compatibility test and measurement technology Conducted disturbance immunity of RF field induction
GB/T 17626.8-2006 Electromagnetic compatibility test and measurement technology Power frequency magnetic field immunity test
GB/T 17626.10-2017 Electromagnetic compatibility test and measurement technique Damping oscillating magnetic field immunity test
GB/T 17626.11-2008 Electromagnetic compatibility test and measurement techniques Immunity to voltage dips, short interruptions and voltage changes
test
GB/T 17626.12-2013 Electromagnetic compatibility test and measurement technology ringing wave immunity test
GB/T 17626.16-2007 Electromagnetic compatibility test and measurement technology 0Hz~150kHz common mode conducted disturbance immunity test
GB/T 17626.17-2005 Electromagnetic compatibility test and measurement technology DC power input port ripple immunity test
GB/T 17626.18-2016 Electromagnetic compatibility test and measurement technology Damping oscillator wave immunity test
GB/T 17626.29-2006 Electromagnetic compatibility test and measurement technology DC power input port voltage dip, short interruption and
Immunity test for voltage changes
GB/T 20945-2013 Information security technology information system security audit product technical requirements and test evaluation methods
GB/T 25069-2010 Information Security Technology Terminology
GB/T 32919-2016 Information Security Technology Industrial Control System Safety Control Application Guide
...
