工业控制系统信息安全防护技术研究  

Information Security Protection Technology for Industrial Control System

作　　者：康荣保[1] 张晓[1] 杜艳霞 KANG Rong-bao;ZHANG Xiao;DU Yan-xia(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第8期1965-1971,共7页Communications Technology

摘　　要：工业控制系统是国家关键信息基础设施正常运行的核心,面临着严峻的攻击威胁。工业控制安全受到各国政府、标准化组织、工控企业和安全厂商的高度重视。在分析工业控制系统架构组成、通信协议的基础上,结合典型工业控制系统攻击案例,分析总结了工业控制系统攻击特点。为应对日益严重的攻击威胁,提升工业控制系统运行安全、状态监视以及对威胁事件的监测预警能力,研究了工业控制系统安全模型,提出了工业控制系统安全防护技术框架,分析了工控系统防护的关键技术。The industrial control system, as the core of the state critical information infrastructure, often faces serious attack threat, and various governments, standardization organizations, industrial control companies and security vendors always attach great importance to the industrial-control safety. Based on analysis of the industrial control system architecture and communication protocol, combined with the typical cases of industrial control system attack, the characteristics of industrial control system attack are summarized. In order to cope with the increasingly serious attack threat, improve the industrial control system operational safety, state monitoring and its ability to monitor and warn the threat events, the safety model of industrial control system is studied, the technical framework of industrial control system security protection proposed, and the key technologies of industrial control system protection also analyzed.

关 键 词：工业控制系统 安全 防护 框架 

分 类 号：TN918[电子电信—通信与信息系统]