能源工业网络空间安全风险与模型研究  

Security risks and models of energy industry's cyberspace

作　　者：宫月[1] 李秋香[1] 张心语 龚钢军 金璐 GONG Yue;LI Qiuxiang;ZHANG Xinyu;GONG Gangjun;JIN Lu(First Research Institute of the Ministry of Public Security of PRC,Beijing 100044,China;Beijing Engineering Research Center of Energy Electric Power Information Security(North China Electric Power University),Beijing 102206,China;Beijing Huadian Yunbo Technology Company Limited,Beijing 102206,China)

机构地区：[1]公安部第一研究所,北京100044 [2]北京市能源电力信息安全工程技术研究中心(华北电力大学),北京102206 [3]北京华电云博科技有限公司,北京102206

出　　处：《华电技术》2021年第2期40-45,共6页HUADIAN TECHNOLOGY

基　　金：国家重点研发计划项目(2016YFB0901200)。

摘　　要：随着能源工业技术体系在开放性、互联互通性和标准化工作等方面的需求越来越强烈,能源工业控制系统物理隔离的传统封闭环境面临着被逐步打破的压力。从关键基础设施和关键信息基础设施的角度,分析了能源工业控制系统的安全定位和不同能源工业体系的安全防护水平的差异性,研究了能源工业网络空间下基于信息物理系统的运营技术(OT)与信息通信技术(ICT)融合控制的安全风险,以及能量流、业务流和信息流深度融合的安全特征,提出了能源工业网络空间安全管理模型,力求实现能源工业网路空间的智能化感知、主动防御和预测性维护,提升能源工业网络空间防护能力。The increasing demand for an open,interconnective and standardized technical system of energy industry exerts sustained pressure on the traditional physical isolated control system.From the perspective of key infrastructure and critical information infrastructure,the importance of control system security in energy industry and the difference of security protection levels in different energy industrial systems were analyzed.At the same time,security risks on the fusion of operation technology(OT)and information communication technology(ICT)in energy industry cyberspace based on the information physical systems were studied,and the security characteristics of the deep integrations of energy flow,business flow and information flow were described.Finally,a security management model for energy industry cyberspace was proposed to realize its intelligent perception,active defense,predictive maintenance,and improvement of the protection capacity.

关 键 词：能源工业网络空间 工业控制系统 关键信息基础设施 安全防护水平 等级保护2.0 

分 类 号：TM711[电气工程—电力系统及自动化] TN98[电子电信—信息与通信工程]