摘要
工业控制系统广泛应用于国家重要基础设施。随着工业控制网与传统信息网的逐渐融合,漏洞数量和利用漏洞形成有效攻击的数量也在不断攀升。由于电力行业工艺流程复杂,设备和业务种类繁多,控制过程与物理世界紧密相连,导致无法在电力生产环境中开展针对电力系统安全检测及防护策略验证。通过建设电力行业高仿真工控安全实验室可以解决这一问题。本文针对电力行业发展趋势,总结了目前电力行业存在的问题,研究电力行业高仿真技术、虚实结合技术、模糊测试技术等,实现电力行业工业信息安全能力的整体提升。
Industrial control systems are widely used in critical infrastructure.With the gradual integration of industrial control networks and traditional information networks,the number of loopholes and the number of effective attacks by exploiting loopholes are also increasing.The control process is closely connected with the physical world,which makes it impossible to carry out security detection and protection strategy verification for the power system in the power production environment.This problem can be solved by building a high-simulation industrial control safety laboratory in the power industry.In view of the development trend of the power industry,this paper summarizes the current problems in the power industry,and studies the high simulation technology,virtual-real integration technology,and fuzzy testing technology in the power industry,so as to achieve the overall improvement of the power industry’s industrial information security capabilities.
作者
蒋焱
Jiang Yan(Zhejiang Bolean LoT Tech Co.,Ltd.,Hangzhou Zhejiang,311100)
出处
《工业信息安全》
2022年第4期49-56,共8页
Industry Information Security
关键词
电力行业
工业信息安全
工控安全实验室
Power Industry
Industrial Information Security
Industrial Control Safety Laboratory
