IEC TR 62443-3-1:2009

FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions and acronyms
   3.1 Terms and definitions
   3.2 Acronyms
4 Overview
5 Authentication and authorization technologies
   5.1 General
   5.2 Role-based authorization tools
   5.3 Password authentication
   5.4 Challenge/response authentication
   5.5 Physical/token authentication
   5.6 Smart card authentication
   5.7 Biometric authentication
   5.8 Location-based authentication
   5.9 Password distribution and management technologies
   5.10 Device-to-device authentication
6 Filtering/blocking/access control technologies
   6.1 General
   6.2 Network firewalls
   6.3 Host-based firewalls
   6.4 Virtual Networks
7 Encryption technologies and data validation
   7.1 General
   7.2 Symmetric (secret) key encryption
   7.3 Public key encryption and key distribution
   7.4 Virtual private networks (VPNs)
8 Management, audit, measurement, monitoring, and
   detection tools
   8.1 General
   8.2 Log auditing utilities
   8.3 Virus and malicious code detection systems
   8.4 Intrusion detection systems (IDS)
   8.5 Vulnerability scanners
   8.6 Forensics and analysis tools (FAT)
   8.7 Host configuration management tools (HCM)
   8.8 Automated software management tools (ASM)
9 Industrial automation and control systems computer
   software
   9.1 General
   9.2 Server and workstation operating systems
   9.3 Real-time and embedded operating systems
   9.4 Web technologies
10 Physical security controls
   10.1 General
   10.2 Physical protection
   10.3 Personnel security
Annex A (informative) Trade name declarations
Bibliography

IEC/TR 62443-3-1:2009(E) provides a current assessment of various cybersecurity tools, mitigation counter-measures, and technologies that may effectively apply to the modern electronically based IACSs regulating and monitoring numerous industries and critical infrastructures. It describes several categories of control system-centric cybersecurity technologies, the types of products available in those categories, the pros and cons of using those products in the automated IACS environments, relative to the expected threats and known cyber vulnerabilities, and, most important, the preliminary recommendations and guidance for using these cybersecurity technology products and/or countermeasures.