煤炭港口管控一体化系统工控安全防护设计  

Industrial Control Security Protection Design of Coal Port Management and Control Integration System

作　　者：马跃强 Ma Yueqiang(Nsfocus Information Technology Co.,Ltd.,Beijing,100089)

机构地区：[1]绿盟科技集团股份有限公司,北京100089

出　　处：《工业信息安全》2022年第2期75-81,共7页Industry Information Security

摘　　要：煤炭港口通过管控一体化技术将信息管理系统和生产作业控制系统进行有机结合,实现了生产作业全流程的贯通,提升了生产作业效率,却面临了新的挑战,在互联互通带来便利的同时也遭受了病毒、木马、黑客的攻击。通过对煤炭港口管控一体化系统地梳理和安全现状分析,本文提出一种纵深防护技术体系,从边界防护、访问控制、入侵检测、监测审计、主机防护、安全运维以及监测预警等方面进行全方位设计,对煤炭港口管控一体化系统进行安全防护,为今后的货运港口安全防护建设提供参考。Through the integrated management and control technology,the coal port organically combines the information management system and the production operation control system,realizes the connection of the whole process of decision-making,scheduling and production operation,improves the production operation efficiency,but faces new challenges.While the interconnection brings convenience,it is also attacked by viruses,Trojans and hackers.After combing and analyzing the security status of the coal port management and control integrated system,this paper proposes an in-depth protection technology system,which is designed in an all-round way from the aspects of boundary protection,access control,intrusion detection,monitoring and audit,host protection,security operation and maintenance,monitoring and early warning,so as to protect the security of the coal port management and control integrated system.It provides a reference for the security protection construction of freight port in the future.

关 键 词：管控一体化系统 控安全 全防护 态势感知 

分 类 号：U691[交通运输工程—港口、海岸及近海工程]