数控机床自动化网络信息安全综合防护方案  

Integrated Information Security Protection Method in the Automatic Network of CNC

作　　者：刘杰[1] 汪京培[1] 李丹[1] 云雷[1] 陈晶晶 

机构地区：[1]中国赛宝实验室信息安全研究中心,广州510610 [2]中国和平利用军工技术协会,北京100088

出　　处：《组合机床与自动化加工技术》2016年第3期82-85,89,共5页Modular Machine Tool & Automatic Manufacturing Technique

基　　金：国防基础科研计划资助(JSQB2014205A005)

摘　　要：为了解决数控机床联网后的信息安全威胁,提出了一种数控网络信息安全综合防护方案。该方案基于数控网络系统架构,以事件生命周期为主线,采用可信安全防护技术、自治愈理论,融合基础数据和系统安全防护技术,形成数控机床自动化网络安全综合防护功能。对方案的功能、性能以及基于数控系统的高级持续性威胁实例进行详细分析,结果表明了所提方案的合理性和较好防护效果。该方案的建立实现了数控网络系统事前监控、事中检测和自治愈、事后审计系统化的信息安全防护。In order to solve the information security threats for the interconnected CNC,an information security integrated protection method for automatic network of CNC is studied in this paper. Based on the NC network system architecture,this method takes the event lifecycle as the main line,adopts the trusted security protection,self-healing theory,and integrates into basic data and system security protection technologies,finally forms a comprehensive security protection for automation network of CNC. Detailed analysis from functionality,performance,and an example of advanced persistent threats for NC system are performed,the results validate the rationality and effectiveness of the proposed method. The integrated protection method realizes the systematic security protection covering the proactive monitoring,detection,self-healing,post auditing and evidence collecting for the network systems of CNC.

关 键 词：数控机床 数控系统 信息安全防护 可信 自治愈 

分 类 号：TH166[机械工程—机械制造及自动化] TH659