国内外工业控制系统信息安全标准研究  

Research on the Domestic and Foreign Standards for ICS Information Security

作　　者：邸丽清[1] 高洋[1] 谢丰[1] 

机构地区：[1]中国信息安全测评中心,北京100085

出　　处：《信息安全研究》2016年第5期435-441,共7页Journal of Information Security Research

摘　　要：工业控制系统信息安全问题日益突出,工业控制系统信息安全的保障迫切需要完善的标准体系作为支撑,因此针对国内外工业控制系统信息安全标准体系的研究显得尤为重要.首先通过研究国外工业控制系统信息安全相关标准、指南及行业规范,分析其体系框架及安全技术要求,总结了国外标准体系的特点;其次通过分析国内工业控制系统信息安全标准及行业规范的现状和特点,提出了我国目前标准体系研究存在的一些不足,并有针对性地给出相关建议,为进一步完善国内工业控制系统信息安全标准体系提供参考.Industrial control system （ICS） is widely used in various industries in electrical, petrochemical, water treatment, railway and so on. ICS gradually becomes the target of cyber- attacks due to the open and important mission of itself. Lots of cyber-attack events in recent years, such as ＂Stuxnet＂ virus, ＂Flame＂ virus and Trojan attack for Ukrainian power grid, have proven that the cyber-attack threats for ICS are increasingly upgraded. The perfect ICS information security standards system are urgently needed to build for the information security assurance of ICS as a support. So the research on the domestic and foreign information security standard system for ICS is particularly important. Firstly, the characteristics of foreign standard system are summarized through the study on the technical framework and technical requirements of the foreign ICS information security standards, guidelines and norms. Secondly, the characteristics of the domestic ICS information security standards and norms are analyzed by summarizing the development trends of the domestic ICS information security standards. Finally, some existing deficiencies of the current domestic research on the ICS information security standard system are presented, and some suggestions for the further improving domestic standard system are given.

关 键 词：工业控制系统 信息安全 标准体系 标准研究 标准综述 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置] TP309[自动化与计算机技术—控制科学与工程]