铝工业控制系统网络安全分析及策略

Analysis and strategies for cyber security of industrial control system in aluminum industry

工业控制系统分为三层,即设备层、控制层和信息管理层。软硬件均采用各个自动化公司自己的软硬件系统,网络大多都是基于以太网协议和各厂商各自开发的通讯协议。近些年,由于工业控制网络安全事件频发,各个系统厂商也没有相应的解决方案,使得这一问题显得尤为突出。通过分析国内铝厂控制系统网络的现状和铝工业生产管理的特点,在生产管理、网络架构和监控等方面,提出了安全防范策略。

Industrial Control System (ICS)covers three layers, which are equipment layer, control layer and information management layer. Software and hardware are all based on the software and hardware systems of each automation company. Most of the networks are based on TCP/IP and communication protocols developed by each manufacturer. In the recent decade, the incidents about ICS occur frequently and there are no corresponding solutions for each main automation vendor, which makes this problem particularly prominent. By analyzing the status quo of ICS in domestic aluminium plants and the char acteristics of production management in aluminium industry, it puts forward safety precautionary strategies in production management, ICS architecture and monitoring.