GB/Z 174.3-2026Industrial-process measurement, control and automation - Smart manufacturing - Part 3: Challenges for cybersecurity (English PDF)

Foreword

This document is a standardized technical guidance document for reporting.

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents". Drafting.

This document is Part 3 of GB /Z 174 "Industrial Process Measurement Control and Automation - Intelligent Manufacturing". GB /Z 174 has been published. The following section.

---Part 1: Terms and Definitions;

---Part 3: Challenges to Cybersecurity.

This document is equivalent to IEC TR63283-3:2022 "Industrial process measurement, control and automation, intelligent manufacturing - Part 3: Networks".

The document type has been changed from an IEC technical report to a national standardization guidance technical document in my country.

Introduction

Smart manufacturing brings many new challenges to cybersecurity. It begins with an architectural paradigm shift, removing many features previously confined to dedicated systems.

Valuable assets (design, production planning, engineering, supply chain management, etc.) are integrated into a single system. This requires collaboration among many stakeholders.

Information exchange. This is thanks to new information technologies such as the Industrial Internet of Things (IoT), edge computing, machine learning, and wireless communication, as well as additive manufacturing, etc.

The application of new production technologies, and the data that has been exposed belonging to the contracting parties.

The increasing digitalization of cybersecurity, the tight interconnection of networks, and the use of standard IT technologies have expanded the attack surface and enabled [the following actions].

New types of attacks. This makes protecting the integrity of the target and the availability of production systems, as well as the confidentiality of data involved in the production process, more challenging.

They are in danger. For example, there is the risk of counterfeiting, loss of proprietary technology or intellectual property, or leakage of key performance indicators.

This document outlines the cybersecurity challenges facing intelligent manufacturing, identifying the problems that intelligent manufacturing systems need to solve/implement. Ensure its security.

This document is limited to the impacts of cybersecurity related to smart manufacturing. Other requirements for smart manufacturing systems, such as security and reliability, will be discussed later.

The report addresses this issue. However, cybersecurity requires consideration and resolution of functional safety issues arising from cybersecurity attacks.

The initial use case analysis aimed to gain a better understanding of the topic through a bottom-up approach. The use cases provided are not necessarily exhaustive. Future... The goal is to build a general intelligent manufacturing model using a top-down approach.

Intelligent manufacturing is the core path to achieve digital transformation and intelligent upgrading in the field of industrial process measurement, control, and automation. To ensure... To ensure the orderly application of intelligent manufacturing technologies, promote interconnection and collaborative development across the industry chain, and establish a scientific and applicable standard system.

This has become the primary task in carrying out related work. Among this series of standards, GB /Z 174 "Industrial Process Measurement Control and Automation - Intelligent Manufacturing" "Intelligent Manufacturing" is a general standard that guides fundamental work and applied practices in this field, aiming to establish the terminology foundation and typical application paradigms of intelligent manufacturing.

The analysis of the network security environment is planned to consist of three parts.

---Part 1: Terms and Definitions. The aim is to establish a unified language environment for the field of intelligent manufacturing and to contribute to international standards for intelligent manufacturing.

This provides a standardized terminology definition reference for understanding and industry applications.

---Part 2: Use Cases. The purpose is to organize and list application cases of major intelligent manufacturing technologies and systems, providing a basis for technology implementation and system deployment. The system integration provides a practical example for reference.

---Part 3: Challenges to Cybersecurity. The aim is to analyze the security challenges faced by industrial production processes in the context of the current Internet of Things.

The comprehensive risk assessment provides a situational reference for the industry to formulate safety strategies and address challenges.

1 Scope

This document addresses the cybersecurity challenges faced by smart manufacturing facility engineering projects.

Note 1. Cybersecurity challenges and how to address them may impose constraints on smart manufacturing systems engineering.

Note 2. Unless otherwise specified in this document, "security" refers to "information security".

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies. This document. control systems)

Note: GB/T 33007-2016 Industrial Communication Networks - Network and System Security - Establishment of Security Procedures for Industrial Automation and Control Systems (IEC 62443-2-1:2010, IDT)

GB/T 35673-2017 Security requirements and security levels for industrial communication networks and systems (IEC 62443-3-3:2013, IDT)

GB/T 40211-2021 Terminology, Concepts and Models for Security of Industrial Communication Networks and Systems (IEC TS62443-1-1:2009, IDT)

GB/T 40218-2021 Industrial Communication Networks - Network and System Security - Information Security Technology for Industrial Automation and Control Systems (IEC TR) 62443-3-1.2009, IDT)

GB/T 40682-2021 Safety Procedures Requirements for Industrial Automation and Control Systems (IACS) Service Providers (IEC 62443-2-4) 2015, IDT)

GB/T 42445-2023 Patch management in an IACS environment for industrial automation and control systems security (IEC TR62443-2-3:2015, IDT)

GB/T 42456-2023 Safety Technical Requirements for Information Security Components of Industrial Automation and Control Systems (IACS) (IEC 62443-4-2:2019) IDT)

GB/T 42457-2023 Requirements for the Secure Development Lifecycle of Information Security Products for Industrial Automation and Control Systems (IEC 62443-4-1:2018) IDT)

GB/T 44861-2024 Safety Risk Assessment for Safety System Design of Industrial Automation and Control Systems (IEC 62443-3-2:2020, IDT)

3 Terms, Definitions and Abbreviations