国内油气SCADA系统信息安全管理问题及防护措施

Information Security Management Problems and Protective Measures of Domestic Oil and Gas SCADA System

油气SCADA系统经过多年的发展与应用,已经形成依托于通信网络的分布式结构,但这同时也加大了信息安全管理的风险。而国家基础设施在面对网络攻击时表现的相当脆弱,因此油气系统信息防护就显得十分重要。基于目前国内油气SCADA系统信息安全管理存在的诸多问题,参考国内电力行业二次系统安全防护方案及国家电力监管委员会《电力二次系统安全防护规定》的安全设计原则,提出了接入防护机制、纵向行文加密、系统横向分区与纵向分域的综合防护设计思路,从系统设计结构上形成相辅相成的多层防护体系。

After years of development and application, oil and gas SCADA system has formed a distributed structure relying on the communication network, but also increased the risk of information security management. The national infrastructure in the face of network attacks is very fragile, so system information protection is very important. Based on the existing problems of information security management in domestic oil and gas SCADA system, referring to the safety protection scheme of the secondary system in the domestic electric power industry and the safety design principle of ＂the regulation of power secondary system safety protection＂ proposed by the State Electricity Regulatory Commission, the paper puts forward the comprehensive protection design of access protection mechanism, vertical text encryption, system horizontal partition and vertical segmentation, and from the system design structure to form a complementary multi-layer protection system.