核电站非安全级DCS网络和主机信息安全防护

Cyber Security Protection of Non-safety DCS Network and Host of NPP

随着工业4.0的浪潮滚滚而来,核电站控制系统已经普遍改造为SCADA、DCS等数字化控制系统。工业以太网、工业现场总线,以及大量标准互联网技术已经被应用于核电站控制系统。本文将聚焦于网络安全和主机安全,探讨核电站非安全级DCS的信息安全防护。DCS网络安全防护将主要涉及3个方面,包括区域划分、边界防护和网络入侵防护。DCS主机安全防护将主要涉及集中管理,用于给出一种核电站非安全级DCS的信息安全防护方案,着重通过网络安全防护措施和主机安全防护措施,有效提高核电站非安全级DCS的信息安全防护能力。

With the arrival of industry 4.0,NPP control system has been generally upgraded to digital control system such as SCADA or DCS.Industry Ethernet,industry field bus,and a large number of standard internet technologies have been applied to NPP control system.This article will focus on network security and host security to explore the cyber security protection of Non-safety DCS.DCS network security protection will mainly involve three aspects,including regional division,boundary protection and network intrusion prevention.DCS host security protection will mainly involve centralized management.The article is used to give an cyber security protection plan for nuclear power plant Non-safety DCS,focusing on network security protection measures and host security protection measures to effectively improve the cyber security protection capability of nuclear power plant Non-safety DCS.