走出家用物联网设备网络安全设计中的传统路径依赖

Go Out of the Traditional Path Dependence in the Cyber Security of IoT Devices

Q/CVC 0028-2019《智能家电(IoT设备、互联设备)网络安全评价及测试规范》标准针对当前市场上物联网设备网络安全现状,规定了不同等级的安全要求,对提升家用物联网产品网络应用规范具有重要作用。本文从Q/CVC 0028-2019标准中选取了数个技术要点来剖析编制思路和应用实践,对家电企业在产品设计过程中如何通过该标准改进和提升就可避免陷入传统产品设计的路径依赖进行研究。本文中还攫取数项常见网络安全缺陷问题,解读Q/CVC 0028-2019标准的架构及其背后的技术脉络。

According to the current cyber security situation of IoT devices,the security requirements of different grades of products are specified,which plays an important role in improving the network application specifications of IoT devices in Q/CVC 0028-2019 Evaluation and test specification for cyber security of smart appliance.In this paper,several technical points are selected from Q / CVC 0028-2019 to analyze the preparation idea and application practice,and how to avoid falling into the path dependence of traditional product design through standardized improvement and promotion in the product design process of home appliance enterprises is studied.This paper also grabs several common cyber security defects and interprets the architecture of Q / CVC 0028-2019 and the technical context behind it.