数据安全视角下工业互联网平台的攻击与防护

Attack and protection of industrial internet platform from the perspectiveof data security

数据是工业互联网平台的核心资产,也是平台价值创造的来源。通过构建以工业数据为核心的平台分析、控制、决策、管理体系,能强化工业数据资源的原始积累和应用创新,充分发挥了工业数据资源的核心价值,工业数据安全是推进工业互联网平台健康运行的重要保障。文章围绕工业数据的生命周期,分析了数据在工业互联网平台各层次间流转时面临的安全威胁,针对现有平台防护措施的薄弱环节,提出了“战略”+“战术”的防护理念,给出可信的工业互联网平台构建思路,旨在建立一个集工业数据可信汇聚、分析、应用为一体的可信工业互联网平台数据安全防护体系。

To Industrial Internet platform,data is the core asset and the origin for value creation.By building an architecture for analysis,control,decision-making and management with industrial data as the core,the original accumulation of industrial data source and application innovation can be strengthened,and the value of industrial data can be fully utilized.Industrial data security plays an important role to promote the healthy operation of industrial Internet platform.In this paper we analyze the security threats faced by Industrial Internet platform in the view of data flow.Aiming at the weaknesses of present protective measures for Industrial Internet platform,we put forward a protection concept combined by"strategy"and"tactics".By designing an architecture of trusted management and trusted techniques,we aim to build a trustworthy industrial Internet platform which can guarantee trusted data gathering,processing and applying.