工业控制系统信息安全发展综述  

A Review on the Development of Information Security in Industrial Control Systems

作　　者：张硕 韩晓龙 姜胜 Zhang Shuo;Han Xiaolong;Jiang Sheng(Top Information Technology Co.,Ltd.,Jinan Shandong,250000)

机构地区：[1]道普信息技术有限公司,山东济南250000

出　　处：《工业信息安全》2025年第1期8-15,共8页Industry Information Security

摘　　要：文章旨在探讨全球和我国工业控制系统(ICS)信息安全现状、趋势及挑战与发展机会。通过文献综述和比较分析,文章研究了国际ICS信息安全标准、法规和我国的本土化解决方案。结果显示,ICS信息安全领域正面临高级持续威胁(APT)等复杂威胁。为应对这些威胁,国际社会已制定了一系列信息安全标准和指南,如IEC 62443和NIST 800-82,以提高ICS的安全性。我国在信息安全研究和创新方面取得了显著成果,包括本土化解决方案的发展和国际合作。为有效应对挑战和机会,组织需采用综合信息安全策略,包括漏洞管理、多层次安全措施和持续改进。信息安全是持续演进的领域,需要跨国合作和技术创新,确保ICS的可信度和稳定性。The purpose of this article is to investigate the current situation,trends,challenges,and development opportunities of global and domestic industrial control system(ICS)information security.Through literature review and comparative analysis,this article studied international ICS information security standards,regulations,and domestic solutions in our country.The results show that the ICS information security field is facing complex threats such as advanced persistent threats(APT).In response to these threats,the international community has developed a series of information security standards and guidelines,such as IEC 62443 and NIST 800-82,to improve the security of ICS.Our country has achieved significant results in information security research and innovation,including the development of domestic solutions and international cooperation.To effectively respond to challenges and opportunities,organizations need to adopt comprehensive information security strategies,including vulnerability management,multi-level security measures,and continuous improvement.Information security is an evolving field that requires cross-border cooperation and technological innovation to ensure the trustworthiness and stability of ICS.

关 键 词：工业控制系统 信息安全 高级持续威胁 国际合作 安全解决方案 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]