核电DCS边界网络安全隔离解决方案研究  

Research on Boundary Isolation Scheme of Nuclear Power DCS Cyber Security Protection

作　　者：李若兰 李启凌 李柯 农政林 马飞 Li Ruolan;Li Qiling;Li Ke;Nong Zhenglin;Ma Fei(CGN Power Co.,Ltd.,Guangdong,Shenzhen,518031,China;Shanghai Engineering Science&Technology Co.,Ltd.,Shanghai,200241,China)

机构地区：[1]中国广核电力股份有限公司,广东深圳518031 [2]上海中广核工程科技有限公司,上海200241

出　　处：《仪器仪表用户》2023年第11期68-72,共5页Instrumentation

摘　　要：结合核电DCS网络安全防护架构,通过研究基于逻辑隔离、物理隔离等隔离技术的边界隔离解决方案,在核电DCS与外部网络之间实现不同区域边界的有效隔离,从而建立安全边界,保护DCS免受外部网络攻击和入侵的威胁,确保核电厂安全稳定运行。解决方案已在多个核电基地得到良好应用,可为核电其他工控系统以及核电以外的其他高安全领域网络安全边界隔离提供借鉴及经验。Combined with the overall solution of cyber security protection of nuclear power industrial control system,this paper studies the boundary isolation scheme of logical isolation and physical isolation to achieve effective isolation of different regional boundaries between the industrial control system of nuclear power plant and the external network,so as to establish regional security boundaries to protect the industrial control system from the threat of external cyber attacks and intrusions and ensure the safe and stable operation of nuclear power plant.The relevant scheme has been well applied in a number of nuclear power bases,and can provide reference and experience for the boundary isolation of cyber security protection in other high-security fields besides nuclear power.

关 键 词：核电厂 DCS 逻辑隔离 安全区域边界 网络安全 边界隔离 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]