GB/T 35673-2017 in English
VALIDIndustrial communication networks—Network and system security—System security requirements and security levels
- Issued on:2017-12-29
- Implemented on:2018-07-01
- File Format:PDF
- Delivery:Via email within 10 business days
$873.00
| Standard No: | GB/T 35673-2017 |
| Document status: | VALID |
| Title in English: | Industrial communication networks—Network and system security—System security requirements and security levels |
| Title in Chinese: | 工业通信网络 网络和系统安全 系统安全要求和安全等级 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 10 business days |
| Issued on: | 2017-12-29 |
| Implemented on: | 2018-07-01 |
| Professional Classification: | GB-National Standard |
| Related Keywords: | system security system security requirements
standard security requirement category sl1 protection goal sl4 protection goal key key technical requirements control system industrial control system transformation case |
| Related Topics: | Security Level
dmz Whole network series network gb gb network gb/t35673 GB/T 35673 Industrial Control System Security Level GBT35673 GB/T 35673-2017 Nuclear power plant digital systems and network security Prefecture and city network security Military wireless network security gb35673 gb 35673-2017 |
《GB/T 35673-2017工业通信网络 网络和系统安全 系统安全要求和安全等级》由TC124（全国工业过程测量控制和自动化标准化技术委员会）归口，主管部门为中国机械工业联合会。
Introduction
Analysis of the core framework of the standard
| Security requirement category | SL1 protection goal | SL4 protection goal | Key technical measures |
|---|---|---|---|
| Identity authentication control (IAC) | Prevent unintentional access | Defense against highly motivated professional attacks | Multi-factor authentication, PKI certificate management |
| Use control (UC) | Basic permission restriction | Fine-grained access control | Role permission mapping, session management |
| Data confidentiality (DC) | Information leakage prevention | Advanced decryption resistance | Encrypted transmission and storage protection |
Detailed explanation of key technical requirements
1. Identity authentication control (IAC)
Core requirements:All personnel, software processes and devices must be authenticated before they can access the control system. Security level (SL) classification:
- SL1: Basic protection (such as modifying the default password)
- SL3: Hardware-level key protection is required (TPM module application)
- SL4: Multi-factor authentication system to defend against APT-level attacks
2. Usage control (UC)
Typical scenario:The operator station needs to be configured with a "double confirmation" mechanism (RE4), and key parameter modification requires double authorization. Wireless device management requirements:
- SL3+ requires deployment of a wireless intrusion detection system
- Mobile code requires integrity verification before execution
Implementation suggestions
Refinery industrial control system transformation case
When a refinery’s DCS system was upgraded to SL3:
- Deploy hardware security module to protect PLC communication keys
- Implement biometric + IC card two-factor authentication at the operator station
- Establish an independent audit server to centrally store logs
Note:The SL level of each area must be determined through risk assessment. SIS systems usually require SL4.
Standard Evolution Analysis
This standard is equivalent to IEC 62443-3-3:2013, with the following major developments:
- 2010 version: proposed 7 basic requirements framework for the first time
- 2013 version: refined SL level definition and technical requirements
- 2017 national standard: added Chinese industry implementation guidelines
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 17039-1997 in English
STANDARD practice for utilization of test data to determine conformance with specifications
1997-10-14 -
GB/T 37466-2019 in English
Laser lift-off equipment used for GaN
2019-06-04 -
GB/T 21540-2022 in English
Hydraulic fluid power—On-line automatic particle-counting systems for liquids—Methods of calibration and validation
2022-10-12 -
GB 30604-2015 in English
National Food Safety Standard - Food Nutrition Enhancer - 1,3-Dioleoyl 2-palmitoyl triglyceride
2015-09-22 -
GB/T 43252-2023 in English
Test methods of energy consumption and range for fuel cell electric vehicles
2023-11-27 -
GB 15607-2023 in English
Safety code of practice for coating—Safety for electrostatic powder coating process
2023-12-28 -
GB 50952-2013 in English
Technical code for lightning protection engineering for rural residential areas
- -
GB/T 20478-2024 in English
Glossary of plant quarantine
2024-03-15 -
GB/T 29734.3-2020 in English
Energy-saving windows and doors for buildings—Part 3: Steel-plastic complex windows and doors
2020-03-06 -
GB/T 15432-1995/XG1-2018 in English
Ambient air--Determination of total suspended particulates--Gravimetric method, includes Amendment 1
1995-01-04
