基于工业母机防火墙的数控网络安全防护解决方案  

CNC network security protection solution based on industrial master machine firewall

作　　者：王晓鹏[1] 张雄杰 陈毅真 周建伟 尹雅伟 Wang Xiaopeng;Zhang Xiongjie;Chen Yizhen;Zhou Jianewei;Yin Yawei(NSFOCUS Technology Co.,Ltd.,Beijing 100089,China)

机构地区：[1]北京神州绿盟科技有限公司,北京100089

出　　处：《网络安全与数据治理》2022年第12期10-16,33,共8页CYBER SECURITY AND DATA GOVERNANCE

基　　金：工业互联网高质量发展工程联网数控数控机床安全项目(TC210H02L)。

摘　　要：随着针对数控机床的网络攻击日益严重,基于供给侧打造数控机床安全供给能力,成为制造强国之路的重要关切之一。立足于行业痛点,解决数控机床安全紧迫问题,实现需求侧安全保障。设计了一种同时将“NC代码异常检测”“NC代码病毒检测”“防碰撞检测”等安全机制结合起来的工业防火墙系统——工业母机防火墙,围绕安全通信网络、安全区域边界、安全计算环境、安全管理中心、专用防护设备等方面,给出了具体防护措施和建议。本文的研究设计及解决方案对于保障制造强国、建设数字中国等具有重要现实意义。With the increasingly serious network attacks against CNC machine tools,the secure supply of CNC machine tools based on supply-side has become one of the important concerns of the road to manufacturing power.Based on the pain points of the industry,this paper solves the urgent security problems of CNC machine tools and realizes demand-side security.This paper designs an industrial firewall system which combines the security mechanisms such as“NC code anomaly detection”,“NC code virus detection”and“anti-collision detection”at the same time,and gives specific protective measures and suggestions around secure communication network,secure area boundary,secure computing environment,security management center,special protective equipment.Therefore,the research design and solutions in this paper closely serve the national strategic needs such as Manufacturing Power and Digital China.

关 键 词：工业母机 数控机床 DNC网络 网络安全 

分 类 号：TP305[自动化与计算机技术—计算机系统结构]