水利工程工业控制系统网络安全研究  

Cybersecurity analysis on water resources engineering industrial control system

作　　者：杨旭[1] 谢丰[2] 任旭诚 YANG Xu XIE Feng REN Xucheng(Water Information Center, the Ministry of Water Resources, Beijing 100053, China China Information Technology Security Evaluation Center, Beijing 100085, China Beijing Golden-water Info-tech.Ltd., Beijing 100053, China)

机构地区：[1]水利部水利信息中心,北京100053 [2]中国信息安全测评中心,北京100085 [3]北京金水信息技术发展有限公司,北京100053

出　　处：《水利信息化》2017年第3期20-23,共4页Water Resources Informatization

摘　　要：近年来,工业控制系统面临的网络安全风险日渐增大,已威胁到工业生产正常运行。水利工程工业控制系统承担防洪、航运、发电等重要职责,安全运行至关重要。为加强水利工程工业控制系统安全管理,从实地调研和问卷调查两方面对水利工程工业控制系统的运行情况和安全措施等进行统计。分析表明水利工程工业控制系统在管理和技术两方面都存在较多薄弱点,亟需建立管理与技术并重,具备深度防御能力的安全防护体系,以确保水利工程工业控制系统安全稳定运行。In recent years, cybersecurity risks which the industrial control system is facing are increasing, which has threatened the normal operation of industrial production. Water resources engineering industrial control system undertakes the flood control, shipping, power generation and other important responsibilities. Therefore, its safe operation is of great significance. In order to strengthen the safe management of water resources engineering industrial control system, it investigates from the spot, makes questionnaire and statistically analyzes the operation and safety measures toward water resources engineering industrial control system. The analysis shows that there are many weaknesses in the management and technical aspects of the water resources engineering industrial control system, and it is urgent to establish a safety protection system with both management and technology as well as profound defensive ability to ensure the safe and stable operation of the water resources engineering industrial control system.

关 键 词：水利工程 工业控制系统 网络安全 深度防御 

分 类 号：TV21[水利工程—水文学及水资源]