Evaluating Industrial Control Devices Security: Standards, Technologies and Challenges

Feng Xie (1) , Yong Peng (1) , Wei Zhao (1) , Yang Gao (1) , Xuefeng Han (1)

1 CNITSEC - China Information Technology Security Evaluation Center

Cyber security for industrial automation and control systems has been a much discussed topic in recent years. Security evaluation of industrial control devices has been gaining rising attention. In this paper, the security evaluation standards for industrial control devices are analyzed, and the corresponding several certifications are compared. Meanwhile, this paper proposes several key testing technologies that can be used in evaluation of devices, and analyzes primary difference compared with traditional IT devices. Finally, this paper discussed the challenges facing us in evaluation of industrial control devices.

Mots clés: Cyber security; industrial control device; standards; certifications; testing technologies

Domaines: Informatique [cs]; Sciences de l'information et de la communication

Feng Xie, Yong Peng, Wei Zhao, Yang Gao, Xuefeng Han. Evaluating Industrial Control Devices Security: Standards, Technologies and Challenges. 13th IFIP International Conference on Computer Information Systems and Industrial Management (CISIM), Nov 2014, Ho Chi Minh City, Vietnam. pp.624-635, ⟨10.1007/978-3-662-45237-0_57⟩. ⟨hal-01405658⟩