工业领域勒索攻击事件态势分析及应对方法探讨  

Comprehensive Analysis of Ransomware Attacks in the Industrial Sector and Discussion of How to Deal with them

作　　者：崔莹莹 原真 刘健帅 Cui Yingying;Yuan Zhen;Liu Jianshuai(Beijing Venus Information Security Technology Co.,Ltd.,Beijing,100193)

机构地区：[1]北京启明星辰信息安全技术有限公司,北京100193

出　　处：《工业信息安全》2022年第10期63-68,共6页Industry Information Security

摘　　要：勒索病毒的传播发展已成为近年来网络安全业界关注的热点问题之一,工业企业的安全脆弱性又为勒索病毒提供了爆发的温床。针对勒索攻击对工业领域造成的巨大危害,有效开展勒索事件处置与事前防护显得尤为重要。本文总结了工业领域勒索病毒的攻击现状以及演变趋势,并以此为切入点,探讨工业企业在应对勒索攻击事件时应采取的处置、恢复和预防方法。本文对几种基于勒索病毒的网络安全检测技术进行了概述和简要分析,从技术和管理两个方面提出了工业领域应对勒索攻击的预防方法,有针对性地探讨工业企业应对勒索攻击的方法,从而保障工业企业的网络安全,促进行业良性发展。The spread of ransomware has become one of the hot issues in the network security industry in recent years,and the security vulnerability of industrial enterprises provides a breeding ground for ransomware outbreaks.In view of the great harm caused by ransomware attacks to the industrial sector,it is especially important to effectively carry out ransomware incident handling and pre-protection.This paper summarizes the current situation and evolution trend of ransomware attacks in the industrial sector,and takes this as the starting point to discuss the handling,recovery and prevention methods that industrial enterprises should take when dealing with ransomware attacks.This paper provides an overview and brief analysis of several ransomware-based network security detection technologies,proposes prevention methods for ransomware attacks in the industrial sector from both technical and management aspects,and discusses targeted methods for industrial enterprises to deal with ransomware attacks,so as to safeguard the network security of industrial enterprises and promote the benign development of the industry.

关 键 词：勒索病毒 工业领域 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]