NSTL国家科技图书文献中心

1. Information-Centric Adoption and Use of Standard Compliant DevSecOps for Operational Technology: From Experience to Design Principles NSTL国家科技图书文献中心

Henry Haverinen | Tero Paeivaerinta ... - 《Software business: 14th International conference on software business (ICSOB 2023), November 27–29, 2023, Lahti, Finland》 - International conference on software business - 2024, - 400～415 - 共16页

摘要： standards such as IEC* 62443-4-1 set up the requirements* | development. The main challenge of IEC* 62443-4-1 resides in* | Systems, one of the earliest IEC* 62443-4-1 -certified* | contextual adoption and use of the IEC* 62443-4-1 standard* | Secure and agile development of operational

关键词： DevSecOps | operational technology | IEC 62443-4-1 | design principle | action design research | information-centric adoption

2. Cybersecurity Fundamentals Are Not Just for Industrial Control Systems: Guidance and Direction Are Available NSTL国家科技图书文献中心

Donald G. Dunn | Eric Cosman - 《IEEE industry applications magazine》 - 2024,30(6) - 56～63 - 共8页

摘要： (IEC) 62443* [1] , [2] , [3] , [4] , [5] , [6* | the ISA and IEC* Technical Committee 65 Working Group* | Industrial automation and control systems | (IACSs) are important for supporting the U.S. critical | infrastructure and maintaining national security. IACS owners

关键词： Standards | Industries | Regulation | Computer crime | Ransomware | Industrial control | Petroleum industry | Chemical industry | Computer security | Control systems...

3. Security Certification of Cyber Physical Systems for Critical Infrastructure based on the Compositional MILS Architecture NSTL国家科技图书文献中心

Andreas Hohenegger | Gerald Krummeck ... - 《47th Annual Conference of the IEEE Industrial Electronics Society: IECON 2021, Toronto, Ontario, Canada, 13-16 October 2021, [v.1]》 - Annual Conference of the IEEE Industrial Electronics Society - 2021, - 1～6 - 共6页

摘要： and IEC* 62443-4-1/62443-4-2 security evaluations and* | We describe compositional architectures and | certifications in the research project certMILS. Compositional | architectures enable re-use of certified COTS (commercial off | -the-shelf) components with a well-defined delegation

关键词： Industrial electronics | Rail transportation | Safety | Smart grids | Critical infrastructure | Security | IEC Standards

NSTL主题词： Cyber-physical systems | critical infrastructures | certification | INFRASTRUCTURE | Building construction | ARCHITECTURE | physical | Security

4. Using Process Models to Understand Security Standards NSTL国家科技图书文献中心

Fabiola Moyon | Daniel Mendez ... - 《SOFSEM 2021 :》 - International Conference on Current Trends in Theory and Practice of Computer Science - 2021, - 458～471 - 共14页

摘要： the IEC* 62443-4-1. These standards, written in* | and encompasses so far the IEC* 62443-4-1 standard* | Many industrial software development processes | today have to comply with security standards such as | natural language, are ambiguous and complex to

关键词： Secure software engineering | Security standards | Business process modeling | Industrial control systems

NSTL主题词： Safety standards

5. THE RING MAIN UNIT OF THE FUTURE: GREEN AND DIGITAL FOR SMART GRIDS NSTL国家科技图书文献中心

C. Preve | S. Gaday ... - 《The 26th International Conference and Exhibition on Electricity Distribution: 26th International Conference and Exhibition on Electricity Distribution (CIRED 2021), 20-23 Sept. 2021, Online Conference》 - International Conference and Exhibition on Electricity Distribution - 2021, - 415～419 - 共5页

摘要：, implemented and tested as per IEC* 62443-4-1 standard and* | brings Security Level 2 as per IEC* 62443-4-2. The free* | The development of the smart grids, the risks | of cyber-attacks and the possible ban of SF6 | require safe, environmentally friendly, cyber-secured

关键词： circuit breakers | distributed power generation | electric fuses | IEC standards | power engineering computing | power system security | renewable energy sources | security of data | sensors | smart power grids...

NSTL主题词： Smart grids

6. Comprehensive Security Solution for an Industry 4.0 Garment Manufacturing System NSTL国家科技图书文献中心

Dasunpriya Kalhara | Udara De Alwis ... - 《2021 3rd International Conference on Advancements in Computing: 3rd International Conference on Advancements in Computing (ICAC), 9-11 Dec. 2021, Colombo, Sri Lanka》 - International Conference on Advancements in Computing - 2021, - 67～72 - 共6页

摘要： based on ISO 27001:2013 and IEC* 62443 security* | solution focusing on four major areas 1) Standardization | 4) Intrusion detection was applied to Cyber | Raspberry Pi 4 was utilized as IDS (Intrusion Detection | Industry 4.0, digital transformation towards

关键词： Access control | Standards organizations | Configuration management | Intrusion detection | Organizations | Fourth Industrial Revolution | Security

NSTL主题词： Garment manufacture | Security

7. How to Integrate Security Compliance Requirements with Agile Software Engineering at Scale? NSTL国家科技图书文献中心

Fabiola Moyon | Daniel Mendez ... - 《Product-focused software process improvement :》 - International Conference on Product-Focused Software Process Improvement - 2020, - 69～87 - 共19页

摘要： security standard IEC* 62443-4-1 for secure product* | Integrating security into agile software | development is an open issue for research and practice | . Especially in strongly regulated industries, complexity | increases not only when scaling agile practices but also

关键词： Secure software engineering | Scaled agile framework | Security standards

NSTL主题词： Scale formation | Software engineering | Scale | Integrate | Compliance | Security

8. A Light-Weight Tool for the Self-assessment of Security Compliance in Software Development An Industry Case NSTL国家科技图书文献中心

Fabiola Moyon | Christoph Bayr ... - 《SOFSEM 2020: Theory and Practice of Computer Science: 46th International Conference on Current Trends in Theory and Practice of Informatics (SOFSEM 2020), 20–24 January 2020, Limassol, Cyprus》 - International Conference on Current Trends in Theory and Practice of Informatics - 2020, - 403～416 - 共14页

摘要： development processes with the IEC* 62443-4-1 standard, and* | Companies are often challenged to modify and | improve their software development processes in order to | make them compliant with security standards. The | complexity of these processes renders it difficult for

关键词： Security standards | Secure software engineering | Security assessment | Secure development process | Tool-support

NSTL主题词： Software design | computer software | Self-Assessment | Compliance | Security

9. Integration of Security Standards in DevOps Pipelines: An Industry Case Study NSTL国家科技图书文献中心

Fabiola Moyon | Rafael Soares ... - 《Product-focused software process improvement :》 - International Conference on Product-Focused Software Process Improvement - 2020, - 434～452 - 共19页

摘要： considering the IEC* 62443-4-1 security standard that* | In the last decade, companies adopted DevOps | as a fast path to deliver software products | according to customer expectations, with well aligned | teams and in continuous cycles. As a basic practice

关键词： Secure software engineering | Security standards | Agile software engineering | DevOps pipeline | DevSecOps | Industrial control systems

NSTL主题词： Safety standards | DNA Integration | integration | pipeline | piping | Case studies

10. Towards Continuous Security Compliance in Agile Software Development at Scale NSTL国家科技图书文献中心

Fabiola Moyon | Kristian Beckers ... - 《2018 IEEE/ACM 4th International Workshop on Rapid Continuous Software Engineering: 4th IEEE/ACM International Workshop on Rapid Continuous Software Engineering (RCoSE), 29 May 2018, Gothenburg, Sweden》 - IEEE/ACM International Workshop on Rapid Continuous Software Engineering - 2018, - 31～34 - 共4页

摘要： of IEC* 62443-4-1, a standard for secure product* | With agile methodologies increasingly being | applied in regulated environments, security and | compliance emerge as critical issues. Combining both | concerns is challenging because security engineering

摘要： standards such as IEC* 62443-4-1 set up the requirements* | development. The main challenge of IEC* 62443-4-1 resides in* | Systems, one of the earliest IEC* 62443-4-1 -certified* | contextual adoption and use of the IEC* 62443-4-1 standard* | Secure and agile development of operational

关键词： DevSecOps | operational technology | IEC 62443-4-1 | design principle | action design research | information-centric adoption

摘要： (IEC) 62443* [1] , [2] , [3] , [4] , [5] , [6* | the ISA and IEC* Technical Committee 65 Working Group* | Industrial automation and control systems | (IACSs) are important for supporting the U.S. critical | infrastructure and maintaining national security. IACS owners

关键词： Standards | Industries | Regulation | Computer crime | Ransomware | Industrial control | Petroleum industry | Chemical industry | Computer security | Control systems...

摘要： and IEC* 62443-4-1/62443-4-2 security evaluations and* | We describe compositional architectures and | certifications in the research project certMILS. Compositional | architectures enable re-use of certified COTS (commercial off | -the-shelf) components with a well-defined delegation

关键词： Industrial electronics | Rail transportation | Safety | Smart grids | Critical infrastructure | Security | IEC Standards

NSTL主题词： Cyber-physical systems | critical infrastructures | certification | INFRASTRUCTURE | Building construction | ARCHITECTURE | physical | Security

摘要： the IEC* 62443-4-1. These standards, written in* | and encompasses so far the IEC* 62443-4-1 standard* | Many industrial software development processes | today have to comply with security standards such as | natural language, are ambiguous and complex to

关键词： Secure software engineering | Security standards | Business process modeling | Industrial control systems

NSTL主题词： Safety standards

摘要：, implemented and tested as per IEC* 62443-4-1 standard and* | brings Security Level 2 as per IEC* 62443-4-2. The free* | The development of the smart grids, the risks | of cyber-attacks and the possible ban of SF6 | require safe, environmentally friendly, cyber-secured

关键词： circuit breakers | distributed power generation | electric fuses | IEC standards | power engineering computing | power system security | renewable energy sources | security of data | sensors | smart power grids...

NSTL主题词： Smart grids

摘要： based on ISO 27001:2013 and IEC* 62443 security* | solution focusing on four major areas 1) Standardization | 4) Intrusion detection was applied to Cyber | Raspberry Pi 4 was utilized as IDS (Intrusion Detection | Industry 4.0, digital transformation towards

关键词： Access control | Standards organizations | Configuration management | Intrusion detection | Organizations | Fourth Industrial Revolution | Security

NSTL主题词： Garment manufacture | Security

摘要： security standard IEC* 62443-4-1 for secure product* | Integrating security into agile software | development is an open issue for research and practice | . Especially in strongly regulated industries, complexity | increases not only when scaling agile practices but also

关键词： Secure software engineering | Scaled agile framework | Security standards

NSTL主题词： Scale formation | Software engineering | Scale | Integrate | Compliance | Security

摘要： development processes with the IEC* 62443-4-1 standard, and* | Companies are often challenged to modify and | improve their software development processes in order to | make them compliant with security standards. The | complexity of these processes renders it difficult for

关键词： Security standards | Secure software engineering | Security assessment | Secure development process | Tool-support

NSTL主题词： Software design | computer software | Self-Assessment | Compliance | Security

摘要： considering the IEC* 62443-4-1 security standard that* | In the last decade, companies adopted DevOps | as a fast path to deliver software products | according to customer expectations, with well aligned | teams and in continuous cycles. As a basic practice

关键词： Secure software engineering | Security standards | Agile software engineering | DevOps pipeline | DevSecOps | Industrial control systems

NSTL主题词： Safety standards | DNA Integration | integration | pipeline | piping | Case studies

摘要： of IEC* 62443-4-1, a standard for secure product* | With agile methodologies increasingly being | applied in regulated environments, security and | compliance emerge as critical issues. Combining both | concerns is challenging because security engineering

关键词： Security | Software engineering | IEC Standards | Software | Automation | Conferences

NSTL主题词： Software prototyping | Compliance | Security

4008-161-200 800-990-8900

国家科技图书文献中心

摘要： standards such as IEC 62443-4-1 set up the requirements | development. The main challenge of IEC 62443-4-1 resides in | Systems, one of the earliest IEC 62443-4-1 -certified | contextual adoption and use of the IEC 62443-4-1 standard | Secure and agile development of operational

关键词： DevSecOps | operational technology | IEC 62443-4-1 | design principle | action design research | information-centric adoption

摘要： (IEC) 62443 [1] , [2] , [3] , [4] , [5] , [6 | the ISA and IEC Technical Committee 65 Working Group | Industrial automation and control systems | (IACSs) are important for supporting the U.S. critical | infrastructure and maintaining national security. IACS owners

关键词： Standards | Industries | Regulation | Computer crime | Ransomware | Industrial control | Petroleum industry | Chemical industry | Computer security | Control systems...

摘要： and IEC 62443-4-1/62443-4-2 security evaluations and | We describe compositional architectures and | certifications in the research project certMILS. Compositional | architectures enable re-use of certified COTS (commercial off | -the-shelf) components with a well-defined delegation

关键词： Industrial electronics | Rail transportation | Safety | Smart grids | Critical infrastructure | Security | IEC Standards

NSTL主题词： Cyber-physical systems | critical infrastructures | certification | INFRASTRUCTURE | Building construction | ARCHITECTURE | physical | Security

摘要： the IEC 62443-4-1. These standards, written in | and encompasses so far the IEC 62443-4-1 standard | Many industrial software development processes | today have to comply with security standards such as | natural language, are ambiguous and complex to

关键词： Secure software engineering | Security standards | Business process modeling | Industrial control systems

NSTL主题词： Safety standards

摘要：, implemented and tested as per IEC 62443-4-1 standard and | brings Security Level 2 as per IEC 62443-4-2. The free | The development of the smart grids, the risks | of cyber-attacks and the possible ban of SF6 | require safe, environmentally friendly, cyber-secured

关键词： circuit breakers | distributed power generation | electric fuses | IEC standards | power engineering computing | power system security | renewable energy sources | security of data | sensors | smart power grids...

NSTL主题词： Smart grids

摘要： based on ISO 27001:2013 and IEC 62443 security | solution focusing on four major areas 1) Standardization | 4) Intrusion detection was applied to Cyber | Raspberry Pi 4 was utilized as IDS (Intrusion Detection | Industry 4.0, digital transformation towards

关键词： Access control | Standards organizations | Configuration management | Intrusion detection | Organizations | Fourth Industrial Revolution | Security

NSTL主题词： Garment manufacture | Security

摘要： security standard IEC 62443-4-1 for secure product | Integrating security into agile software | development is an open issue for research and practice | . Especially in strongly regulated industries, complexity | increases not only when scaling agile practices but also

关键词： Secure software engineering | Scaled agile framework | Security standards

NSTL主题词： Scale formation | Software engineering | Scale | Integrate | Compliance | Security

摘要： development processes with the IEC 62443-4-1 standard, and | Companies are often challenged to modify and | improve their software development processes in order to | make them compliant with security standards. The | complexity of these processes renders it difficult for

关键词： Security standards | Secure software engineering | Security assessment | Secure development process | Tool-support

NSTL主题词： Software design | computer software | Self-Assessment | Compliance | Security

摘要： considering the IEC 62443-4-1 security standard that | In the last decade, companies adopted DevOps | as a fast path to deliver software products | according to customer expectations, with well aligned | teams and in continuous cycles. As a basic practice

关键词： Secure software engineering | Security standards | Agile software engineering | DevOps pipeline | DevSecOps | Industrial control systems

NSTL主题词： Safety standards | DNA Integration | integration | pipeline | piping | Case studies

摘要： of IEC 62443-4-1, a standard for secure product | With agile methodologies increasingly being | applied in regulated environments, security and | compliance emerge as critical issues. Combining both | concerns is challenging because security engineering

关键词： Security | Software engineering | IEC Standards | Software | Automation | Conferences

NSTL主题词： Software prototyping | Compliance | Security

4008-161-200 800-990-8900

国家科技图书文献中心

摘要： standards such as IEC* 62443-4-1 set up the requirements* | development. The main challenge of IEC* 62443-4-1 resides in* | Systems, one of the earliest IEC* 62443-4-1 -certified* | contextual adoption and use of the IEC* 62443-4-1 standard* | Secure and agile development of operational

摘要： (IEC) 62443* [1] , [2] , [3] , [4] , [5] , [6* | the ISA and IEC* Technical Committee 65 Working Group* | Industrial automation and control systems | (IACSs) are important for supporting the U.S. critical | infrastructure and maintaining national security. IACS owners

摘要： and IEC* 62443-4-1/62443-4-2 security evaluations and* | We describe compositional architectures and | certifications in the research project certMILS. Compositional | architectures enable re-use of certified COTS (commercial off | -the-shelf) components with a well-defined delegation

摘要： the IEC* 62443-4-1. These standards, written in* | and encompasses so far the IEC* 62443-4-1 standard* | Many industrial software development processes | today have to comply with security standards such as | natural language, are ambiguous and complex to

摘要：, implemented and tested as per IEC* 62443-4-1 standard and* | brings Security Level 2 as per IEC* 62443-4-2. The free* | The development of the smart grids, the risks | of cyber-attacks and the possible ban of SF6 | require safe, environmentally friendly, cyber-secured

摘要： based on ISO 27001:2013 and IEC* 62443 security* | solution focusing on four major areas 1) Standardization | 4) Intrusion detection was applied to Cyber | Raspberry Pi 4 was utilized as IDS (Intrusion Detection | Industry 4.0, digital transformation towards

摘要： security standard IEC* 62443-4-1 for secure product* | Integrating security into agile software | development is an open issue for research and practice | . Especially in strongly regulated industries, complexity | increases not only when scaling agile practices but also

摘要： development processes with the IEC* 62443-4-1 standard, and* | Companies are often challenged to modify and | improve their software development processes in order to | make them compliant with security standards. The | complexity of these processes renders it difficult for

摘要： considering the IEC* 62443-4-1 security standard that* | In the last decade, companies adopted DevOps | as a fast path to deliver software products | according to customer expectations, with well aligned | teams and in continuous cycles. As a basic practice

摘要： of IEC* 62443-4-1, a standard for secure product* | With agile methodologies increasingly being | applied in regulated environments, security and | compliance emerge as critical issues. Combining both | concerns is challenging because security engineering