油气管道SCADA系统工控安全分析

Industrial control security analysis of SCADA system for oil and gas pipeline

近年来全球工业信息安全事件频发,为加强油气管道SCADA系统的安全防护能力,提出基于资产、威胁源、脆弱性进行分析的工控安全风险分析方法。通过对系统中存在的资产进行整理归纳,找出系统面临的威胁源及存在的脆弱性利用途径,并结合某油气管道的调控中心及场站进行分析,从而找出系统可能存在的风险,为管理员部署系统安全防护措施提供参考依据。

In recent years,global industrial information security events occur frequently.In order to strengthen the security protection ability of oil and gas pipeline SCADA system,this paper proposes an industrial control security risk analysis method based on the analysis of assets,threat sources and vulnerability.By sorting out and summarizing the existing assets in the system,the threat sources and the existing vulnerability utilization ways of the system are found out.Combined with the analysis of the control center and the station of an oil and gas pipeline,the possible risks of the system are found out,which provides a reference for the administrator to deploy system security protection measures.