ISASecure!EDSACRT 説明 - css-center.or.jp

1 Control System Security Center ISAS ecure EDSA CRT 2014 1 15 CSSC 1 CSSC ISAS ecure EDSA Control System Security Center ISAS ecure EDSA CRT 1. CRT 2. CRT 3. CRT 4. 2 Control System Security Center CRT CRT 3 EDSA (SDSA) (FSA) (CRT) (robust) , 3 / 3 ( ) SDSA FSA CRT ISA Security Compliance Institute (ISCI) and ISAS ecure EDSA : Embedded Device Security Assurance Communication Robustness Testing CRT), Functional Security Assessment(FSA), Software Development Security Assessment SDSA) Control System Security Center CRT ISAS ecure CRT 4 Communication Robustness Testing Software Development Security Assessment Functional Security Assessment Software Development Security Assessment Functional Security Assessment Software Development Security Assessment Functional Security Assessment LEVEL 1 LEVEL 2 LEVEL 3 ICSJWG Spring 2011, (ASCI)

2 Validating the Security Assurance of Industrial Automation Products Control System Security Center CRT CRT , , , , l CRT EDSA- 310 u IP CRT EDSA- 401 406 u 5 ICSJWG Spring 2011, (ASCI) Validating the Security Assurance of Industrial Automation Products Control System Security Center CRT EDSA CRT 6 Certification Schem e(E D S A-100)Chartered lab operations and accreditation(E D S A-200)CR T tool recognition(E D S A-201)ISA Securecertification requirem ents(E D S A-300)M aintenance of ISA Securecertification(E D S A-301)CRT(E D S A-310)FSA(E D S A-311)SDSA(E D S A-312)Ethernet(E D S A-401)ARP(E D S A-402)IP v 4(E D S A-403)IC M P v 4(E D S A-404)UDP(E D S A-405)TCP(E D S A-406) IPA EDSA ISCI Control System Security Center CRT 7 l Group 1 EDSA 401 406 l Group 2 Group 5 ISAS ecure EDSA Group 1 Group 2 Group 3 Group 4 Group 5 IEEE (Ethernet) ARP IPv4 ICMPv4 TCP UDP BOOTP DHCP DNS NTP, SNTP FTP, TFTP HTTP SNMPv1- 2 Telnet HTTPS TLS Modbus/TCP IPv6 OPC Ethernet/IP/CIP PROFINET FFHSE Selected wireless protocols/stacks with elements such as.

3 - IEEE - - WirelessHART SNMPv3 SSH Server OPC- UA MMS IEC 61850 SMTP Protocols for ISAS ecure Communications Robustness Testing Control System Security Center CRT CRT 8 l ISCI DUT l HMI l CRT DUT ) Digital, Analog DUT : Device Under Test TD : Test Device ISCI Test Device Control System Security Center l Wurldtech Achilles Test PlaCorm [orm/ l Codenomicon DEFENSICS CRT ISCI 9 CRT ISCI ISAS ecure : Recognized Test Platforms for CRT Control System Security Center CRT EDSA (CRT ) Achilles 10 Wurldtech Achilles Achilles Communica]on Cer]fica]on l Achilles Test Pla[orm Achilles Level 2 l A) B) Achilles EDSA Achilles DUT ) Digital, Analog DUT : Device Under Test TD.

4 Test Device Achilles Test Platform (Achilles Client) ARP,ICMP,TCP,UDP Control System Security Center CRT 11 6 DUT Analog Output / Digital Output 100%90%80%70%60%50%40%30%20%10%0%Control System Security Center CRT 12 6 DUT Analog Output / Digital Output 100%90%80%70%60%50%40%30%20%10%0% Control System Security Center CRT 13 EDSA- 310 100%90%80%70%60%50%40%30%20%10%0% 100ms Control System Security Center CRT 14

5 HMI 50% Control System Security Center CRT 15 CRT CRT Control System Security Center CRT l CSSC l 10/100/1000 Base- T I/F 100ms 100V/50Hz 16 Control System Security Center CRT CRT 17 Control System Security Center CRT CRT l Firewall l CPU 18 Control System Security Center CRT CRT l i.

6 Ii. l 1 Mbps l 19 Control System Security Center CRT CRT 20 Control System Security Center CRT l CRT l 6 l l 21 Control System Security Center 22