基于CII安全防护的油储工业互联网安全运营体系建设与实践

Construction and Practice of Oil storage Storage Industry Internet Security Operation System Based on CII security Protection

国家关键信息基础设施(Critical Information Infrastructures,CII)承载着大量国家基础数据,其安全防护问题直接影响我国数字经济发展和网络强国建设,本文以国家战略油储设施为例,结合油储工业互联网安全的特点以及面临的威胁和挑战,依据GB/T 22239-2019等标准相关要求,遵循"重点保护、整体防护、动态风控、协同参与"和"安全协同防护顶层设计"战略原则,建立网络安全主动整体防御体系,实现油库CII关键业务的安全防护和安全运营。

The national critical information infrastructure(CII)carries a large am ount of national basic data,and its security protection issues directly affect the development of digital economy and the construction of powerful network in China.This paper takes the national storage facility of strategic oil as an example to analyze the characteristics,the threats and challenges of the oil storage industry’s Internet security.This paper proposes an active overall defense system of cyber security to realize the safety protection and safe operation of key business of the oil depot CII in accordance with the relevant standards requirem ents of GB/T 22239-2019 and other standards,following the strategic principles of"key protection,overall protection,dynamic risk control,collaborative participation"and“security coordinated protection top-level design”.