工业控制系统功能安全与信息安全一体化防护措施研究  

Integration Technology of Functional Safety and Cyber Security for Industrial Control System

作　　者：靳江红[1] 莫昌瑜[2] 李刚[2] JIN Jianghong;MO Changyu;LI Gang(Beijing Municipal Institute of Labour Protection,Beijing,100054)

机构地区：[1]北京劳动保护科学研究所,北京100054 [2]北京广利核系统工程有限公司,北京100094

出　　处：《工业安全与环保》2020年第1期53-60,共8页Industrial Safety and Environmental Protection

基　　金：北京市联合基金(L160009);北京市科学技术研究院“创新团队培养计划”(IG201701C2)

摘　　要：现代工业控制系统面临着越来越严峻的信息安全问题,因此信息安全措施越来越广泛地应用于工业控制系统当中。然而,这些信息安全措施是否会对原有的功能安全措施产生影响,两者之间是否存在潜在的矛盾和冲突,两者如何有效兼容运行,业内并无公认的、可落地执行的解决方案。为保证工业控制系统安全功能的可靠执行,同时又能有效抵御越来越严重的信息安全攻击,须探索一种适用于工业控制系统的、有效确保信息安全与功能安全措施相互兼容的技术方案。以典型的SIL3和SL3工业控制系统为例,基于功能安全措施,逐一遍历信息安全措施,识别出两者潜在的矛盾问题,采用事件树和风险分析相结合的方法给出功能安全与信息安全协同解决方案,最终得到工业控制系统功能安全与信息安全一体化防护措施。Modern industrial control systems are facing more and more serious cyber security problems,so cyber security measures are more and more widely used in industrial control systems.However,whether these cyber security measures will have an impact on the original functional safety function measures,whether there are potential contradictions and conflicts between them,and how the two work effectively and compatibly,there is no recognized and implementable solution in the industry.In order to ensure the reliable execution of the functional safety of industrial control systems and effectively resist more and more serious cyber attacks,it is necessary to explore a technical solution suitable for industrial control systems to effectively ensure the compatibility of cyber security and functional security measures.Taking typical SIL3 and SL3 industrial control systems as examples,based on functional safety measures,cyber security measures are analyzed one by one,and potential contradictions between them are identified.Collaborative solutions of functional safety and cyber security are given by combining event tree and risk analysis.Finally,integrated protective measures of functional safety and cyber security of industrial control systems are obtained.

关 键 词：工业控制系统 信息安全 功能安全 安全一体化 防护措施 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP273[自动化与计算机技术—计算机科学与技术]