智能制造企业网络安全建设方案  

Intelligent Manufacturing Enterprise Network Security Construction Program

作　　者：周玉刚 安成飞 ZHOU Yugang;AN Chengfei(DBAPPSecurity Co.,Ltd.,Hangzhou Zhejiang 310051,China)

机构地区：[1]杭州安恒信息技术股份有限公司,浙江杭州310051

出　　处：《信息安全与通信保密》2020年第S01期17-22,共6页Information Security and Communications Privacy

摘　　要：本方案以某上市公司智能制造工厂为防护对象,是工业互联网安全建设的标杆和范本。按照“全局统一”的思想,提供工业互联网平台、边缘层工业控制系统、平台与边缘层通讯安全的全方位、一体化的工业互联网安全解决方案。集成安全编排、自动化响应(SOAR)技术编排安全能力,实现对接入安全能力的统一编排调度与弹性部署;汇聚攻击检测、异常感知、业务特征匹配、漏洞检测等安全App的多源异构数据并进行综合分析,实现对接入设备的统一管理与关联分析,做好协同防御。This scheme takes the intelligent manufacturing plant of a listed company as the protection object,it is the benchmark and model of industrial Internet security construction.According to the idea of"overall unity",the company provides comprehensive and integrated industrial Internet security solutions for industrial Internet platform,industrial control system at the edge layer,communication security between the platform and the edge layer.Integrate the security choreography capabilities of SOAR technology,realize the unified scheduling and flexible deployment of access security capabilities;The multi-source heterogeneous data of security APPS,such as attack detection,anomaly awareness,business feature matching and vulnerability detection,are collected and comprehensively analyzed to achieve unified management and association analysis of access devices and make coordinated defense.

关 键 词：工业互联网平台安全 工业控制系统安全 安全编排 自动化响应 协同防御 

分 类 号：TN915.08[电子电信—通信与信息系统]