摘要
工业化和信息化的融合给工业控制系统带来巨大的安全挑战。与传统信息系统的安全建设目标不同,工业控制系统安全建设的目标是在保证其高可用性的前提下提供相应的安全防护手段。首先从方法论角度分析了工业控制系统安全需求,其次,从数据安全和管理安全两个维度来讨论了工业控制系统安全防护技术的设计原则,最后,给出了区域划分、终端防护、通信管控、安全设备选择方法和安全操作策略和流程,在安全设备选择部分,给出了典型工业控制系统的安全部署图。
The fusion of industrialization and informatization brings enormous security challenge to ICS （ In- dustrial Control System） . Different from that of traditional information system,the object of ICS is to pro- vide corresponding security protective measures while ensuring its high usability. This paper firstly analyzes the security requirements of ICS in view of methodology. Secondly, the design principle for security protec- tion of ICS is discussed according to the dimensionality of data security and management security. Finally, the methods for area partition, terminal protection, communication control, safe devices selection and safe operation policies and procedures are described in the paper. In the part of security devices selection, a diagram of typical security protection deployment is explained in detail.
出处
《通信技术》
2014年第2期205-209,共5页
Communications Technology
关键词
工业控制系统安全防护技术
区域划分
industrial control system
security protection
area partition
