工业控制系统安全综述  

Review of industrial control systems security

作　　者：陶耀东[1,2] 李宁 曾广圣[1] 

机构地区：[1]中国科学院大学沈阳计算技术研究所,沈阳110168 [2]中国科学院沈阳计算技术研究所有限公司,沈阳110168

出　　处：《计算机工程与应用》2016年第13期8-18,共11页Computer Engineering and Applications

基　　金：沈阳市2014年科技计划项目(No.F14-056-7-00);"高档数控机床与基础制造装备"科技重大专项(No.2013ZX04007031)

摘　　要：工业控制系统(ICS)作为国家基础设施的核心控制设备,其安全关系国计民生。震网(Stuxnet)病毒爆发以后,工控安全逐渐引起国家、企业、战略安全人士的高度重视。总结分析了工控系统的结构资产、脆弱性、存在的威胁、安全措施与风险评估等内容;提出了四层功能的仿免疫系统的安全管理模型,并重点分析其中的关键防御技术,例如深度防御、防火墙、异常检查、Conpot(Control Systems Honeypot)、安全远程访问以及管理策略;指出工控系统安全将会是智慧城市、智慧制造与工业4.0等新兴技术的发展契机与最大挑战;最后结合国内工控安全布局规划,给出工控安全建议,并展望未来的发展前景。Industrial Control System（ICS）as the core of the national infrastructure control equipment, the security affectsnational economy and people’s livelihood. After the Stuxnet virus outbreak, it gradually attracts national, business and strategicsecurity people attention. This paper analyzes the structure and assets, vulnerability, threats, security countermeasures andrisk assessment five aspects of industrial control system. It provides a four-levels-function security management model whichimitates the immune system, and then elaborates the defense in depth, firewall, abnormal examination, Conpot, secure remoteaccess and management strategy. The paper points out that ICS security will become the greatest opportunity and challengeto the smart city, smart manufacturing, industrial 4.0 and other emerging technologies. Finally, according to the domesticindustrial security plan, it makes recommendations for industrial security and looks forward ICS security prospects.

关 键 词：工业控制系统(ICS) Conpot系统 安全 深度防御 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]