工业控制系统信息安全靶场资源管控系统  

Industrial Control System Information Cybersecurity Training Range Resource Control System

作　　者：王轶[1] 陈博 

机构地区：[1]泰戈特(北京)工程技术有限公司 [2]北京网御星云信息技术有限公司

出　　处：《自动化博览》2024年第1期28-30,共3页Automation Panorama1

摘　　要：随着工业企业的数字化转型,信息技术与工业控制深度融合,工业网络逐步互联开放,网络攻击成本降低,安全风险因素增多,网络安全形势空前复杂,工业网络已成为网络空间攻防对抗的主战场。本文结合工业业务场景,分析工业控制系统信息安全的本质特征,介绍覆盖需求分析、设计、研发、集成、测试、评估、运维、废止全生命周期的工业控制系统信息安全靶场资源管控系统,实现共性组件、资源的调度和跨网络、跨架构的攻防演练,为工业控制系统安全测试验证、攻防演练提供切实可行方案。With the digital transformation of industrial enterprises,information technology and industrial control are deeply integrated.With the gradual interconnection and opening of industrial networks,the reduction of network attack costs,the increase in security risk factors,and the unprecedentedly complex network security situation,industrial networks have become the main battlefield for cyber space attack and defense.This article combines industrial business scenarios to analyze the essential characteristics of information security in industrial control systems.It introduces an industrial control system information security target range resource control system that covers the entire lifecycle of requirement analysis,design,research and development,integration,testing,evaluation,operation and maintenance,and abolishment.This system facilitates the scheduling of common components and resources,as well as cross-network and cross-architecture attack and defense drills,offering effective and practical solutions for security testing and cyberexercises in industrial control systems.

关 键 词：工业网络安全 攻防演练 安全靶场管控 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP273[自动化与计算机技术—计算机科学与技术]