石化行业工控系统信息安全的纵深防御

Defense in Depth Strategy of ICS Information Security in Petroleum Chemical Industry

随着我国两化融合的深入发展,信息化的快速发展大大提高了公司的运营效率,但TCP/IP、Ethernet等通用技术和通用产品被大量引入工业领域,也将越来越多的信息安全问题摆在了我们面前。本文以石化行业为例,就工业控制系统信息安全存在的隐患,及其纵深防御架构体系进行简要探讨。

With development of integration of informatization and industrialization, business＇ s operational efficiency improved largely. The integration is also a double-gdged sword, which made us trapped in information security troubles by inviting TCP/IP and Ethernet into industrial fields. In this article, we take petroleum chemical industry as an example to discuss information security risk in ICS and also Defense in Depth strategy.