工业控制网络安全模型研究  

Research on Security Model for Industrial Control Networks

作　　者：王浩[1,2] 吴中福[1,2] 王平[1,2] 

机构地区：[1]重庆大学计算机学院,重庆400044 [2]重庆邮电大学自动化学院,重庆400065

出　　处：《计算机科学》2007年第5期96-98,共3页Computer Science

基　　金：国家863项目:用于工业测量与控制系统的EPA标准(项目编号:2003AA412030)

摘　　要：为了减少产品费用和提高生产效率,更多的专用网络被连入IT网络,或更多的IT技术被应用到工业控制网络系统中,网络安全成为一个重要的问题。工业控制网络系统作为国家基础设施的重要组成,一旦受到攻击和破坏,其影响将是灾难性的。因此,保护工业控制网络系统的安全、防御各种攻击和破坏是关系到国家安全的重要内容。本论文结合中国第一个工业以太网标准《用于测量与控制系统的EPA通信标准》,建立了一般的工业控制网络体系结构,研究分析了它的安全威胁,提出工业控制网络的安全要求,构建了基于区域安全的DMZ模型,最后用UML描述了该模型。In order to reduce production cost and improve productivity, more proprietary networks is interconnected to IT networks,or more IT technologies are applied to industrial automation systems; .network security beco.mecurity become a significant cant problem. Industrial control networks become important component of national infrastructure, when it is attacked or broken, its impact is calamity. Therefore, protecting the security of industrial control networks and defending kinds of attacks and threats is the key contents of nation security. Combining the first Chinese industrial Ethemet standard, Standard for Digital Data Communication for EPA-based Industrial Control Systems, This paper builds general industrial control networks architecture, researches and analyzes threats to it, advances security requirements and proposes DMZ model based security zone, finally depict the model with UML.

关 键 词：工业控制网络 威胁 安全要求 DMZ模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]