由“震网”病毒事件浅议核电站信息安全现状及监管  

The Status Quo and Supervision of NPP Information Security from Stuxnet Attacks

作　　者：胡江[1] 孙国臣[1] 张加军[1] 侯秦脉[1] 

机构地区：[1]环境保护部核与辐射安全中心,北京100082

出　　处：《核科学与工程》2015年第1期181-185,192,共6页Nuclear Science and Engineering

摘　　要：随着核电站控制系统的数字化与网络化程度的不断提高,核电站信息安全所面临的威胁越来越值得高度重视。本文借助"震网"病毒的例子首先介绍目前工业控制系统所面临的风险,然后引申到核电站信息安全可能存在的问题,并介绍美国NRC在应对核电站信息安全威胁时采取的措施和提出的一些针对性的管理导则,最后根据我国核电站的特点对核电站信息安全监管提出建议。With the continuous improvement of NPP digital I＆C system and network, much attention needs to he paid to the threats faced by NPP information security system. This paper aims to address some of the issues in this regard. It starts with an introduction of potential risks in the current control system with the case of Stuxnet attacks. Followed by the hidden hazards existed in the NPP information security system are discussed. Then a demonstration of practices adopted by US NRC when confronting security menace in NPP information security system is introduced. Finally, it proposes several recommendations on nuclear safety supervision based on the characteristics of China＇s NPP.

关 键 词：震网 核电站 数字化控制系统 信息安全 核安全监管 

分 类 号：TL361[核科学技术—核技术及应用]