工业自动化和控制系统的安全性 第4-1部分:安全的产品开发生命周期要求
Security for industrial automation and control systems - Part 4-1: Secure product development lifecycle requirements
标准状态
基本信息
标准简介
IEC 62443-4-1:2018 sECURITY FOR INDUSTRIAL AUTOMATION AND CONTROL svSTEMS -Part 4-1: Secure product development lifecycle requirements1 ScopeThis part of IEC 62443 specifies process requirements for the secure development ofproducts used in industrial automation and control systems. It defines a secure developmentlife-cycle (SDL) for the purpose of developing and maintaining secure products. This life-cycleincludes security requirements definition,secure design,secure implementation (includingcoding guidelines),verification and validation,defect management,patch management andproduct end-of-life. These requirements can be applied to new or existing processes fordeveloping,maintaining and retiring hardware,software or firmware for new or existingproducts.These requirements apply to the developer and maintainer of the product, but not tothe integrator or user of the product.A summary list of the requirements in this document canbe found in Annex B.2Normative referencesThe following documents are referred to in the text in such a way that some or all of theircontent constitutes requirements of this document. For dated references,only the editioncited applies.For undated references, th