工业控制系统信息安全防护研究  

Research on Industrial Control System Security Defense

作　　者：王昱镔[1] 陈思[1] 程楠[1] 

机构地区：[1]公安部第一研究所,北京100048

出　　处：《信息网络安全》2016年第9期35-39,共5页Netinfo Security

摘　　要：工业控制系统信息安全形势严峻,严重威胁社会稳定和国家安全,不容忽视。工业控制系统信息安全有别于传统信息安全,传统信息安全保障方式经常不适用于工业控制系统信息安全领域。文章研究了工业控制系统的特点,通过分析美国工业控制系统网络应急响应小组的报告,阐述了工业控制系统当前的安全形势,提出了由工业控制系统安全防护体系、关键技术及安全生命周期等部分组成的工业控制系统信息安全防护模型。该模型中安全防护体系的研究成果可指导关键技术研究及安全生命周期建设,关键技术的研究成果可转换为安全生命周期各阶段的工业控制系统专用安全防护产品,同时为安全生命周期各阶段提供相应的技术及工具等。该模型可为工业控制系统信息安全领域提供技术及管理方面的有力支撑。Information security situation of industrial control system is grim and cannot be ignored which produces serious threat to social stability and national security. The information security of industrial control system is different from the traditional information security, and the traditional information security is usually not applicable to the field of industrial control system information security. This paper analyzes the characteristics of industrial control system, expounds the current information security situation of industrial control system by analyzing the report produced by the industrial control systems cyber emergency response team of the USA, and puts forward a model of industrial control system security defense which contains the industrial control system security protection system, key technologies and safety life cycle. The research production of security protection system can guide key technologies research and safety life cycle building. The research production of key technologies can be converted into special safety protection products in all stages of the safety life cycle, and provides the corresponding technologies and tools though all stages of the safety life cycle. The model can provide technology and management support for the field of industrial control system information security.

关 键 词：工业控制系统 信息安全 安全防护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]