基于风险评估的大型石油化工厂区工控网络安全防护对策  

Industrial Control Network Security Protection Measures for Large-scale PetrochemicalPlant Areas Based on Risk Assessment

作　　者：陈庚晓 邹武臣 Chen Gengxiao;Zou Wuchen(Sinopec Tianjin Petrochemical Electric Instrument Department,Tianjin 300000,China;Qingdao New Thinking Automation Co.,Ltd.,Qingdao 266000,China)

机构地区：[1]中石化集团天津石化电仪部,天津300000 [2]青岛新思维自动化有限公司,青岛266000

出　　处：《办公自动化》2024年第21期10-12,共3页Office Informatization

摘　　要：在信息化与工业自动化深度融合的背景下,大型石化厂区的工业控制系统(ICS)安全性面临诸多挑战。为此,文章针对大型石化厂区工控网络安全现状进行深入分析,识别外部和内部的安全威胁,并基于当前的风险评估模型,提出一套全面的网络安全防护策略。该策略包括构建以统一监测平台为核心的三层防护架构,强化边界防护、安全审计、工控安全检查工具箱的应用,并建立集中式日志管理与分析系统。这些措施显著提高工控网络的防御能力,保障石化行业生产的安全与稳定。未来,人工智能和机器学习将逐步与工控网络安全融合,以更精准地预测和防御潜在威胁,确保石化行业的持续安全与稳定。In the context of the deep integration of informatization and industrial automation,the safety of industrial control systems(ICS)in large petrochemical plants faces many challenges.Therefore,this article conducts an in-depth analysis of the current situation of industrial control network security in large petrochemical plants,identifies external and internal security threats,and proposes a comprehensive network security protection strategy based on the current risk assessment model.This strategy includes building a three-layer protection architecture with a unified monitoring platform as the core,strengthening the application of boundary protection,security auditing,and industrial control security inspection toolboxes,and establishing a centralized log management and analysis system.These mea-sures have significantly improved the defense capability of industrial control networks,ensuring the safety and stabil-ity of production in the petrochemical industry.In the future,artificial intelligence and machine learning will gradu-ally integrate with industrial control network security to more accurately predict and defend against potential threats,ensuring the sustained security and stability of the petrochemical industry.

关 键 词：风险评估 大型石油化工厂区 工控网络 安全防护 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TE65[自动化与计算机技术—计算机科学与技术]