《工业控制系统网络安全防护指南》实践方法研究  

Practice Method Research of the Guide to Industrial Control Systems Network Security

作　　者：李晓明 杨建 孔同 Li Xiaoming;Yang Jian;Kong Tong(Beijing Institute of H3C Technology Co.,Ltd,Beijing,100094;Qi An Xin Technology Group Inc.,Beijing,100044;China Industrial Control Systems Cyber Emergency Response Team,Beijing,100040)

机构地区：[1]新华三技术有限公司北京研究所,北京100094 [2]奇安信科技集团股份有限公司,北京100044 [3]国家工业信息安全发展研究中心,北京100040

出　　处：《工业信息安全》2024年第5期27-39,共13页Industry Information Security

基　　金：江苏省前沿技术研发计划“基于多模态大模型的工业无线网内生安全技术研发”(No.BF2024065)。

摘　　要：工业控制系统(CS)是国家基础设施的重要组成部分,广泛应用于能源、制造、交通、军工等行业,是关乎国计民生的重要资源。为适应新时期工业控制系统网络安全形势,进一步指导企业提升工控安全防护水平,工业和信息化部制定了《工业控制系统网络安全防护指南》。该指南从安全管理、技术防护、安全运营、责任落实四个方面,对工业控制系统的安全防护提出了系统化的要求和措施。本文通过梳理和分析《工业控制系统网络安全防护指南》,详细阐述了其主要内容和实施要点,对指南的适用范围和防护对象进行了说明,通过系统化地分析和总结指南的内容,为企业提升工控安全防护水平提供参考,助力夯实新型工业化发展的安全根基。The Industrial Control System(ICS)is a crucial component of national infrastructure,widely used in energy,manufacturing,transportation,military,and other industries,and is an important resource concerning the nation’s economy and people’s livelihood.To adapt to the new era of ICS network security,and to further guide enterprises in enhancing ICS security protection,the“Guide to ICS Network Security”have been formulated.This guide provides systematic requirements and measures for ICS security protection from four aspects,security management,technical protection,security operations,and responsibility implementation.This paper systematically reviews and analyzes the“Guide to ICS Network Security”,detailing its main content and implementation points.It explains the applicable scope and protection targets of the guidelines,discusses the challenges and improvement suggestions in implementing the guidelines,and forecasts the future development direction of ICS security protection.By systematically analyzing and summarizing the content of the guidelines,this paper aims to provide a reference for enterprises to enhance their ICS security protection level,contributing to the solid foundation of security for new industrialization development.

关 键 词：工控安全 工业控制系统 安全管理 技术防护 安全运营 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置] TP393.08[自动化与计算机技术—控制科学与工程]