可编程控制器原生的信息安全设计  

Native security design in PLC

作　　者：朱毅明 Zhu Yiming(Holly Sys Co., Ltd., Beijing 100176, China)

机构地区：[1]和利时集团,北京100176

出　　处：《信息技术与网络安全》2018年第3期8-10,19,共4页Information Technology and Network Security

摘　　要：目前大部分主流的PLC不具备原生的信息安全设计,主要采用防火墙、单向网闸、安全审计、防病毒软件等外挂部署的方式抵御来自数字空间的攻击。从系统架构设计的角度讨论可信计算、加密传输、授权管理、虚拟机等信息安全技术在大型PLC应用的可行性以及对于PLC实时性和可靠性的影响,提出一种满足日趋严格的工业信息安全要求的PLC系统设计思路。Most of the current mainstream PLC does not have the native security design. Gateways,firewalls,security audit systems and antivirus software are deployed outside to protect system from network attacking. The topic of the feasibility of adopt information security technologies,including trusted computing,encrypted transmission,authorization management,and virtual machine in PLC and influence on real-time and reliability is discussed from the view of PLC architecture design,in order to meet the increasingly stringent requirements of the industrial information security.

关 键 词：可编程控制器 工业信息安全 原生 

分 类 号：TP293[自动化与计算机技术—检测技术与自动化装置]