网络化SCADA系统安全防御策略  

Security protection strategy of networked SCADA system

作　　者：徐洪华[1] 张旭[2] 

机构地区：[1]长春理工大学计算机科学技术学院,长春130022 [2]吉林交通职业技术学院,长春130012

出　　处：《中国安全生产科学技术》2011年第11期164-168,共5页Journal of Safety Science and Technology

摘　　要：SCADA系统在电力、给水、石油、化工等领域的数据采集与监视控制以及过程控制等诸多领域应用广泛。一直以来,很多工程师和管理者认为SCADA系统是一个相对孤立的物理隔离的系统,有着强有力的访问控制,是相对安全的。然而,随着网络技术和通信技术和计算机技术的发展,SCADA系统逐渐发展成开放式透明运作的标准系统,由此造成系统的安全性降低。针对当前的开放式SCADA系统,本文介绍了系统构成和系统的网络化结构特点,分析了系统可能存在的安全隐患并提出一种层次结构的"防御圈"安全策略。该策略从企业网络和SCADA网络两方面实施具体的安全防护措施。通过对"防御圈"中各个层的合理配置,可以有效地保障SCADA系统安全。SCADA system has a wide application in data acquisition and supervisory control in many fields such as electric power,water supply,oil,chemical industry etc.All the time,many engineers and administrators consider SCADA system as a relatively isolated system,which has powerful access control and is relatively safe.However,with the development of communication and network technology and computer technology,SCADA system has gradually developed into an open and transparent standard system,which causes the decrease in safety.In the light of the current open SCADA system,in this paper the system composition and networked features were introduced,the possible existing safety hazards were analyzed,and a hierarchy ＂ring of defenses＂ safety strategy was presented.This strategy carried out safety precautions from the aspects of corporation network and SCADA network.Through the reasonable configuration in different layers of ＂ring of defenses＂,the safety of SCADA system could be effectively achieved.

关 键 词：远程终端设备 安全 主站 网络化 生产 

分 类 号：X613.2[环境科学与工程]