Adapting security architectures to common standards like IEC 62443 or ISO 27000 in the Industrial Internet of Things (IIoT) involves complex processes and compliance reports. Automatic monitoring of compliance status would enhance this process. Despite limited research, practical applications exist. This paper conducts a market study on providers implementing IEC 62443 in IIoT, aiming to formulate a catalog of monitorable attributes aligned with the standard. The study reveals challenges, such as a lack of formal separation in security architectures, limiting visibility. Despite these challenges, practical implementations share commonalities, providing insights into viable monitoring properties. The research serves as a crucial entry point into developing a comprehensive catalog of monitorable attributes for IEC 62443 standards in IIoT. Aligned with the IEC 62443 SR catalog of document 3-3, monitorable attributes are derived based on current research about IIoT security and Expert Knowledge. The provided tables serve as an exemplary extract, not exhaustive, defining three types of attributes based on their origin of creation.
翻译:在工业物联网(IIoT)中,将安全架构适配至如IEC 62443或ISO 27000等通用标准,涉及复杂的流程与合规报告。自动监测合规状态可优化该流程。尽管相关研究有限,实际应用已存在。本文对在IIoT中实施IEC 62443标准的服务商进行市场调研,旨在构建与标准对齐的可监测属性目录。研究揭示了诸如安全架构缺乏正式分离导致能见度受限等挑战。尽管存在这些挑战,实际实现仍存在共性,为可行的监测特性提供了见解。本项研究为在IIoT中开发IEC 62443标准全面可监测属性目录奠定了关键起点。依据IEC 62443标准文件3-3的SR目录,基于当前IIoT安全研究与专家知识,推导出可监测属性。所提供的表格作为示例性摘录(非详尽),定义了基于创建来源的三种属性类型。