Standard No.:	GB/T 37933-2019
English Name:	Information security technology—Technical requirements of industrial control system dedicated firewall
Chinese Name:	信息安全技术 工业控制系统专用防火墙技术要求
Chinese Classification:	L80    Data encryption
Professional Classification:	GB    National Standard
Issued by:	SAMR and SAC
Issued on:	2019-08-30
Implemented on:	2020-3-1
Status:	valid
Language:	English
File Format:	PDF
Word Count:	16500 words
Price(USD):	490.0
Delivery:	via email in 1 business day

Information security technology—Technical requirements of industrial control system dedicated firewall English 1 Scope This standard specifies the security function requirements, self security requirements, performance requirements and security assurance requirements of industrial control system dedicated firewalls (hereinafter referred to as "industrial control firewalls"). This standard is applicable to the design, development and testing of industrial control firewalls. 2 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies GB/T 2423.5-1995 Environmental testing for electric and electronic products - Part 2: Test methods - Test Ea and guidance: Shock GB/T 2423.8-1995 Environmental testing for electric and electronic products - Part 2: Test methods - Test Ed: Free fall GB/T 2423.10-2008 Environmental testing for electric and electronic products - Part 2: Tests methods - Test Fc: Vibration (sinusoidal) GB/T 4208-2017 Degrees of protection provided by enclosure (IP code) GB 4824-2013 Industrial, scientific and medical (ISM) radio-frequency equipment - Disturbance characteristics - Limits and methods of measurement GB/T 9254-2008 Information technology equipment - Radio disturbance characteristics - Limits and methods of measurement GB/T 13729-2002 Remote terminal unit equipment GB/T 15153.1-1998 Telecontrol equipment and systems - Part 2: Operating conditions - Section 1: Power supply and electromagnetic compatibility GB/T 17214.4-2005 Operating conditions for industrial-process measurement and control equipment - Part 4: Corrosive and erosive influence GB/T 17626.2-2018 Electromagnetic compatibility - Testing and measurement techniques - Electrostatic discharge immunity test GB/T 17626.3-2016 Electromagnetic compatibility - Testing and measurement techniques - Radiated, radio-frequency, electromagnetic field immunity test GB/T 17626.4-2018 Electromagnetic compatibility - Testing and measurement techniques - Electrical fast transient/burst immunity test GB/T 17626.5-2008 Electromagnetic compatibility - Testing and measurement techniques - Surge immunity test GB/T 17626.6-2017 Electromagnetic compatibility - Testing and measurement techniques - Immunity to conducted disturbances, induced by radio-frequency fields GB/T 17626.8-2006 Electromagnetic compatibility - Testing and measurement techniques - Power frequency magnetic field immunity test GB/T 17626.10-2017 Electromagnetic compatibility - Testing and measurement techniques - Damped oscillatory magnetic field immunity test GB/T 17626.11-2008 Electromagnetic compatibility - Testing and measurement techniques - Voltage dips, short interruptions and voltage variations immunity tests GB/T 17626.12-2013 Electromagnetic compatibility - Testing and measurement techniques - Ring wave immunity test GB/T 17626.16-2007 Electromagnetic compatibility - Testing and measurement techniques - Test for immunity to conducted, common mode disturbances in the frequency range 0 Hz to 150 kHz GB/T 17626.17-2005 Electromagnetic compatibility - Testing and measurement techniques - Ripple on d.c.input power port immunity test GB/T 17626.18-2016 Electromagnetic compatibility - Testing and measurement techniques - Damped oscillatory wave immunity test GB/T 17626.29-2006 Electromagnetic compatibility - Testing and measurement techniques - Voltage dips, short interruptions and voltage variations on d.c. input power port immunity tests GB/T 20281-2015 Information security technology - Security technical requirements and testing and evaluation approaches for firewall GB/T 20438.3-2017 Functional safety of electrical/electronic/programmable electronic safety-related systems - Part 3: Software requirements GB/T 20438.4-2017 Functional safety of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations GB/T 25069-2010 Information security technology - Glossary GB/T 32919-2016 Information security technology - Application guide to industrial control system security control 3 Terms and definitions For the purposes of this document, the terms and definitions given in GB/T 20281-2015, GB/T 20438.4-2017, GB/T 25069-2010 and GB/T 32919-2016 as well as the following apply. 3.1 industrial control protocol protocol of communication message between the host computer and the control equipment and between the control equipment and control equipment in an industrial control system, usually including read-write control of analog and digital quantities 3.2 industrial control system dedicated firewall security gateway products deployed between different security domains in the industrial control system or in front of the controller, with network layer access control and filtering functions, industrial control protocol inspection and filtering functions, and high availability, which can be applied in industrial control environments 4 Abbreviations For the purposes of this document, the following abbreviations apply. DMZ: Demilitarized Zone DNAT: Destination Network Address Translation ICMP: Internet Control Message Protocol MAC: Media Access Control NAT: Network Address Translation OPC: Object Linking and Embedding for Process Control

Foreword I Introduction II 1 Scope 2 Normative references 3 Terms and definitions 4 Abbreviations 5 Product description 6 Security technical requirements 6.1 Security technical requirements of basic level 6.1.1 Security function requirements 6.1.2 Self security requirements 6.1.3 Performance requirements 6.1.4 Security assurance requirements 6.2 Security technical requirements of enhanced level 6.2.1 Security function requirements 6.2.2 Self security requirements 6.2.3 Performance requirements 6.2.4 Security assurance requirements Annex A (Informative) Application of industrial control firewall Annex B (Normative) Environmental adaptability requirements Annex C (Informative) Control requirements for application layer of typical industrial control protocol Bibliography