油气管道SCADA系统网络安全风险分析及防护框架研究  

Security Risk Analysis in the SCADA System of Oil and Gas Pipeline and the Design of Defending Framework

作　　者：熊琦[1] 戴忠华[1] 彭勇[1] 伊胜伟[1] 王婷[1] 

机构地区：[1]中国信息安全测评中心,北京100085

出　　处：《通信技术》2014年第8期919-924,共6页Communications Technology

基　　金：国家自然科学基金(No.90818021)资助~~

摘　　要：油气管道SCADA系统已经成为国家关键基础设施的重要组成部分,但由于油气管道覆盖面广,使用的设备、协议以及系统构建时未充分考虑信息安全问题,存在较多的安全隐患,无法抵御来自网络的攻击,急需有效的解决方案。针对这一需求,提出了一种分层的油气管道SCADA系统描述参考模型,并将几种常见的攻击及其危害在相应的层次位置进行了标注。在此基础上,提出了安全区域划分的油气管道防护框架,给出了纵深防御的模型。文中所提出的方法不仅可用于对现有系统进行安全加固,也可作为新建系统的安全架构参考。As the critical components of national critical infrastructure, SCADA system of oil and gas pipeline usually doesn＇ t take security factors in the step of system design, which appears vulnerable to cyberattack, effective solutions are seriously needed. Regarding this requirement, this paper proposes a reference description model for SCADA system of oil. Gas pipeline is also proposed and the security threat is noted in the corresponding layers of the reference model. Based on the model, a defending framework is given and the workflow is described in detail. The proposed framework couldn＇t only be used to make security enhancement for the current running pipeline SCADA system, but also it could be taken as the security guide for the design of new SCADA system.

关 键 词：油气管道 SCADA系统 纵深防御 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]