IEC TR 62443-3-1:2009

FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions and acronyms
   3.1 Terms and definitions
   3.2 Acronyms
4 Overview
5 Authentication and authorization technologies
   5.1 General
   5.2 Role-based authorization tools
   5.3 Password authentication
   5.4 Challenge/response authentication
   5.5 Physical/token authentication
   5.6 Smart card authentication
   5.7 Biometric authentication
   5.8 Location-based authentication
   5.9 Password distribution and management technologies
   5.10 Device-to-device authentication
6 Filtering/blocking/access control technologies
   6.1 General
   6.2 Network firewalls
   6.3 Host-based firewalls
   6.4 Virtual Networks
7 Encryption technologies and data validation
   7.1 General
   7.2 Symmetric (secret) key encryption
   7.3 Public key encryption and key distribution
   7.4 Virtual private networks (VPNs)
8 Management, audit, measurement, monitoring, and
   detection tools
   8.1 General
   8.2 Log auditing utilities
   8.3 Virus and malicious code detection systems
   8.4 Intrusion detection systems (IDS)
   8.5 Vulnerability scanners
   8.6 Forensics and analysis tools (FAT)
   8.7 Host configuration management tools (HCM)
   8.8 Automated software management tools (ASM)
9 Industrial automation and control systems computer
   software
   9.1 General
   9.2 Server and workstation operating systems
   9.3 Real-time and embedded operating systems
   9.4 Web technologies
10 Physical security controls
   10.1 General
   10.2 Physical protection
   10.3 Personnel security
Annex A (informative) Trade name declarations
Bibliography