一种工业控制系统应用层数据安全防护方法  

Safety protection method of data in application layer for industrial control system

作　　者：鲍金鹏 梁光明[1] 刘伟[1] 

机构地区：[1]国防科学技术大学电子科学与工程学院,湖南长沙410073

出　　处：《现代电子技术》2016年第8期14-17,20,共5页Modern Electronics Technique

摘　　要：面对日趋严峻的工业控制系统安全威胁,通常采取主动隔离和被动检测的安全解决方案,然而这些方案仅能作为解决工业控制系统边界安全的一种手段,对于解决系统内部网络以及有效通信等问题作用不是太大,侵入者依旧可以利用各种手段侵入到内部网络进行链路数据破坏。该文从应用层数据安全需求出发,提出一种基于加密网关的工业控制系统通信数据加密防护方法,采用RC4加密算法有效保护上位机与PLC的通信数据安全。实践表明,该方案可靠、稳定、安全,能满足以太网环境下数据加密传输的需要。Faced with increasingly severe security threats to industrial control system,the security solutions of the active isolation and passive detection are usually taken. However,these solutions can be only used as a means to deal with the border security of industrial control systems,but cannot solve the issues in internal networks of the system and effective communication entirely,and the intruders can still take advantage of a variety of means to intrude into the internal network to conduct link data destruction. Considering the security requirement of data in the application layer,a communication data encryption protection method based on encryption gateway is proposed for the industrial control systems,in which RC4 encryption algorithm is adopted to effectively protect the communication data between upper computer and PLC.

关 键 词：工业控制系统 链路数据 安全防护 加密 

分 类 号：TN915-34[电子电信—通信与信息系统]