工控信息安全设备互信技术实践及展望  

Practice and Prospect of Mutual Trust Technology for Industrial Control Information Security Equipment

作　　者：宋昊爽[1] Song Haoshuang(Petro-CyberWorks Information Technology Co.,Ltd.,Beijing 100007,China)

机构地区：[1]石化盈科信息技术有限责任公司,北京100007

出　　处：《当代石油石化》2023年第4期43-46,共4页Petroleum & Petrochemical Today

摘　　要：随着工控信息安全市场开始进入高速发展阶段,国家相关规范和体系化解决方案不断健全,系列化产品技术愈发丰富多样,同一企业内使用的防护设备类型、品牌和管控技术繁多。然而,相对于IT系统生态环境,工控系统具有差异性,需要集中的安全管控手段来应对物理位置分散的防护部署架构,亟需通过可靠的互信机制,防范来自合法集中管控以外的伪造管控指令、越权渗透以及用户非法操作,并打破防护产品品牌壁垒,达到统一安全运维的目的,发挥出工控信息安全防护架构的潜力,发掘更高的系统效益,并保持产品信息安全先进性。文章提炼了近几年在石油化工行业工控信息安全设备互信技术方面的实践和思考,以期为同行起到借鉴作用。With the rapid development of engineering control for information security,relevant systematic solutions and national standards improved in the recent years,serialized equipment and technologies become diverse.But different engineering control systems request a more centralized control method to coordinate the protection deployment architectures in scattered physical locations.This requires a reliable mutual trust mechanism to prevent the forged instructions,the hacker attack,and users’illegal operations.It can also break the brands barrier of different products to unify the security operation,and thus to maximize the operation benefit,and to maintain the advantage of the information security protection architecture.This paper summarizes the recent practice and experience on technical mutual trust of engineering control for information security in petrochemical industry.

关 键 词：工控安全 统一管控 公开密钥基础设施/认证机构 设备互信 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]