Valid

GB/T 41262-2022Technical requirements for cyber-physical fusion anomaly detection specification of industrial control system (English PDF)

工业控制系统的信息物理融合异常检测系统技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (18 pages)

Need quotation for your management?

Get a formal quotation for GB/T 41262-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

March 9, 2022

Implementation date

October 1, 2022

Scope

GB/T 41262-2022 is the English-translated version of 工业控制系统的信息物理融合异常检测系统技术要求.

GB/T 41262-2022 sets the technical requirements for cyber-physical fusion anomaly detection in an industrial control system, the detection that reads network traffic and process values together.

It gives the technical architecture of such a device, its functional modules, the functional requirements each of them has to meet and the performance requirements of the whole.

It is written for industrial control security firms and equipment makers that develop this kind of detection equipment. Issued on 9 March 2022, it has applied since 1 October 2022.

Found what you need?

Document preview — GB/T 41262-2022

National Standard of the People's Republic of China

ICS: 35.240.50
Classification: J 07

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 System Overview
5.1 System Architecture
5.2 Function Module
6 Functional requirements
6.1 Data collection
6.2 Anomaly Detection
6.3 Responses and Alerts
6.4 Processing of test results
6.5 Administrative Control
6.6 Security Management
6.7 Log Management
7 Performance requirements
7.1 False alarm rate
7.2 False negative rate
7.3 Traffic Monitoring Capability
7.4 Concurrent Connections Monitoring Capability
7.5 New TCP connection rate monitoring capability
7.6 Detection time
Appendix A (Informative) Threats in Cyber-Physical Fusion of Industrial Control Systems
Appendix B (Informative) Security Measures for Cyber-Physical Fusion of Industrial Control Systems
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

1 Scope

This document specifies the technical architecture, functional modules, functional requirements and performance requirements.

This document is suitable for industrial control security manufacturers and equipment manufacturers to develop efficient cyber-physical fusion anomaly detection equipment.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 18336.3-2015 Information Technology Security Technology Information Technology Security Assessment Criteria Part 3: Security Assurance Components

GB/T 20275-2013 Information Security Technology Network Intrusion Detection System Technical Requirements and Test Evaluation Methods

GB/T 22239-2019 Basic requirements for classified protection of information security technology network security

GB/T 25069 Information Security Technical Terminology

GB/T 36323 Basic Requirements for Safety Management of Information Security Technology Industrial Control System

GB/T 36324-2018 Information Security Classification Specification for Information Security Technology Industrial Control System

3 Terms and Definitions

The terms and definitions defined in GB/T 25069 and the following apply to this document.

3.1 A general term for a class of control systems used in industrial production

Note: It contains SCADA, DCS and some other small control systems (such as PLC) that are commonly found in the industrial sector and critical infrastructure.

3.2 Cyber-physical fusion

The process of combining instructions, state information, and real physical systems in ICS.

Note: It is embodied in the combination of material flow, information flow and energy flow in production control equipment in ICS.

3.3 Cyber-physical system; CPS

A multidimensional complex system that integrates computing, network, and physical environments.

Note: Real-time perception, dynamic control and communication of large-scale engineering systems are realized through the organic integration and in-depth cooperation of communication technology, computer technology and control technology. information service.

3.4 Abnormal

A malfunction, accident, or aggressive behavior that causes a system to behave differently from normal or existing baselines.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 18 pages — is available in the English PDF.

Referenced standards

Normative references

Similar standards

GB/T 25109.5-2026|GB/T 47018-2026|GB/T 47019-2026|GB/T 47021-2026|GB/T 47118-2026|GB/T 47461-2026

How to Download GB/T 41262-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.