Trends in Industry Standards and International Standards for Industrial Automation Control System Security

摘要

Several security standards have been proposed for industrial control systems. Standardization activities began in the United States and Europe and their results were then studied in Japan. Oil and gas, chemical, and electric power industries have produced results. Non-profit organizations in each industry contributed to standardization and governmental organizations also helped them. In addition, public and private research institutes have been participating in these activities to identify issues on security in industrial control systems and have been providing solutions. Among them, ISA99 has been playing the key role in investigating industrial control systems security from wide ranging perspectives. ISA99 developed ISA 62443, which defines reference model and reference architecture for an industrial control system connected to corporate information systems via DMZ, and defines the security requirements for organizations, control systems, and control devices. The international standards IEC 62443 series is combination of ISA 62443 series and WIB 2.0. A security evaluation and certification standard was developed by the ISA Security Compliance Institute referencing the IEC 62443 series. It is expected to be used for security certification in industrial control systems and to enhance the security of the systems. This paper summarizes industry and international standards for security, including those described above.