hwaalaska.blogg.se

Note that ISO 7498-2 provides standard definitions and architecture for security services, but leaves other standards to define the details of these services. It also provides recommendations on the location of required security services in the seven-layer reference model to ensure secure and successful interoperability between open systems. Non-repudiation : data added to, or a cryptographic transformation of a data unit that allows a recipient of the data unit to prove the source and integrity of the unit and to protect against tampering, for example, by the recipient

Data integrity : the property that data has not been altered or destroyed in an unauthorized mannerĥ. Data privacy : the property that information is not made available or disclosed to unauthorized persons, entities, or processesĤ. Access control : preventing unauthorized use of a resourceģ. Authentication : the corroboration that an entity is the one claimedĢ. ISO 7498-2 defines the following five categories of security service:ġ. It also provides useful standard definitions for security terms. that fit into the reference, model defines the positions in the reference model where they can be provided. In a previous section, we examined the role of the OSI Reference Model (ISO 7498-1) in defining a communications architecture. Likewise, ISO 7498-2, Information processing systems, Open Systems Interconnection, Basic Reference Model - Part 2: Security Architecture, published in 1989, provides a general description of security services and associated mechanisms.

Here we will focus on issues more closely related to SCADA security. Until recently, the term “security”, when applied to SCADA communication systems, referred only to the process of ensuring message integrity against electrical noise and other communications disruptions. But in reality, "security" also has a much broader meaning. Security, in the broad sense, concerns anything that risks undermining the integrity of the company.