工业控制系统网络安全防护体系研究  

Research on Framework Design of Industrial Control System for Cyber-Security Defenses

作　　者：陈亚亮 杨海军 姚钦锋 戴沁芸 

机构地区：[1]国家计算机网络应急技术处理协调中心上海分中心,上海201315

出　　处：《信息网络安全》2013年第10期57-59,共3页Netinfo Security

摘　　要：文章在阐述工业控制系统(ICS)网络概念与特点的基础上,深入分析其安全威胁及脆弱性,提出运用"深度防御"思想,以ICS资产功能及重要性为安全域划分依据,从技术与管理两个维度设计适用于ICS的网络安全防护体系。Security threats and vulnerabilities are analyzed in depth in this paper, which is based on the network concept and the characteristic of the industrial control system （ICS）. Subsequently, Framework design of industrial control system for cyber-security defenses is proposed by the use of ＂defense-in-depth＂ thought, combining with technology and management measures, separating the function and the importance of ICS asset into several security zones.

关 键 词：网络安全 工业控制系统 策略框架 安全域划分 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP273[自动化与计算机技术—计算机科学与技术]