建立工业控制系统安全认证体系迫在眉睫  

Egerness to Establish the Security Certification System of the Industrial Control System

作　　者：王凤娇[1] 魏军[1] 郑潇潇[1] 樊华[1] 

机构地区：[1]中国信息安全认证中心,北京100020

出　　处：《信息安全与通信保密》2017年第6期88-95,共8页Information Security and Communications Privacy

基　　金：国家重点研发计划项目(No.2016YFF0204001)

摘　　要：工业控制系统作为国家关键基础设施的重要组成部分,其安全性已经成为涉及国家安全稳定的重要战略问题。近年来,针对工控系统的病毒和攻击不断涌现,引起了各国的高度重视,纷纷在政策、标准、技术等方面开展了积极应对,美国、日本等主要发达国家已将安全认证作为降低工控系统安全风险的有效手段之一。鉴于当前我国工控系统面临着安全形势非常严峻、设备和系统主要依赖进口以及缺乏发现风险的手段等情况,本文在介绍美国、日本工控系统安全认证情况的基础上,提出应该尽快建立我国自己的工控设备和系统安全认证体系。Industrial control system, as an important part of the national key infrastructure, its security has become an important strategic issues related to national security and stability. In recent years, viruses and attacks against industrial control systems are emerging, which has caused great attention of the world and positive response in policy, standards, technology etc. have been carried out. The main developed countries such as USA and Japan have taken security certification as one of the effective ways in reducing security risks of industrial control systems. In view of the current situation of China＇s industrial control system, the security situation is very serious, the equipment and the system mainly rely on import and the lack of means to find risk etc. Based on the introduction of the security certification of industrial control systems in the United States and japan, this paper puts forward that we should establish our own industrial control equipment and system security certification system as soon as possible.

关 键 词：工业控制系统 关键信息基础设施 网络安全风险 安全保障 安全认证 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置] TP309[自动化与计算机技术—控制科学与工程]