GB/T 37024-2018 in English
VALIDInformation security technology--Security technical requirements of gateway in sensing layer of the internet of things
- Issued on:2018-12-28
- Implemented on:2019-07-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$204.00
《GB/T 37024-2018信息安全技术 物联网感知层网关安全技术要求》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
1. Background and significance of standard formulation
GB/T 37024—2018 "Information Security Technology Internet of Things Perception Layer Gateway Security Technical Requirements" is my country's first security standard for the perception layer gateway of the Internet of Things, which aims to standardize the design, development and testing of the perception layer gateway in the Internet of Things system. With the widespread application of Internet of Things technology, the perception layer gateway is a key device connecting the physical world and the virtual network, and its security directly affects the stability of the entire Internet of Things system.
2. Comparison of standard frameworks
| Standard Dimensions | Basic Level Requirements | Enhanced Level Requirements |
|---|---|---|
| Physical Security | Basic fire prevention, anti-static, and waterproof measures, and the main components are fixed and marked. | Equipped with stable power supply, good signal environment and positioning device. |
| Data protection | Data storage integrity detection, confidentiality and integrity protection during transmission. | Original non-repudiation and acceptance non-repudiation capabilities, support audit data backup. |
| Access control | ACL policy, control internal and cross-network access. | Expand coverage, support blacklist and whitelist mechanisms. |
3. Technology evolution analysis
Case study:In recent years, with the rapid development of IoT technology, the functions and security requirements of perception layer gateways have also been evolving. For example, in intelligent transportation systems, perception layer gateways need to process data from multiple sensors at the same time and ensure the security and real-time performance of these data during transmission. By implementing the GB/T 37024-2018 standard, the overall protection capability of such systems can be effectively improved.
Technology Evolution Trends
- Intelligence:The perception layer gateway is gradually developing from simple protocol conversion to intelligent data processing.
- Security Enhancement:Evolving from basic physical protection to enhanced malicious code prevention and anti-repudiation capabilities.
- Multi-dimensional Protection:Expanding from a single security function to full life cycle management such as system architecture and development process.
4. Implementation Recommendations
In actual applications, it is recommended that enterprises choose the appropriate security level according to their own needs, and strictly follow the standard requirements for gateway design and deployment:
- Risk Assessment:Identify the source of security threats to the IoT system and formulate targeted protection strategies.
- Equipment selection:Choose gateway devices that meet enhanced or basic requirements based on system importance.
- Development specifications:Follow the requirements of the standard for security architecture and functional interfaces to ensure the security of product design.
- Regular audits:Establish a comprehensive audit mechanism to promptly discover and fix potential security vulnerabilities.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 41266-2022 in English
Security testing methods for critical network devices—Switch
2022-03-09 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/Z 24294.1-2018 in English
Information security technology—Guide of implementation for internet-basede-government information security—Part 1:General
2018-03-15 -
GB/T 20009-2019 in English
Information security technology—Security evaluation criteria for database management system
2019-08-30 -
GB/T 28449-2018 in English
Information security technology-Testing and evaluation process guide for classified protection of cybersecurity
2018-12-28 -
GB/T 32213-2015 in English
Information security technology―Public key infrastructure―Specification for remote password authentication and key establishment
2015-12-10 -
GB/T 38249-2019 in English
Information security technology—Security guide of cloud computing services for government website
2019-10-18 -
GB/T 15843.1-2017 in English
Information technology―Security techniques―Entity authentication―Part 1:General
2017-12-29 -
GB/T 36323-2018 in English
Information security technology--Security management fundamental requirements for industrial control systems
2018-06-07
