石化行业工控安全纵深防御体系设计

Design of Defense-in-Depth System for Industrial Control Security in Petrochemical Industry

随着石化行业数字化程度的不断加深,数字化所带来网络安全风险愈发不能忽视。本文通过分析石化网络信息安全现状与需求,结合石化工厂生产作业特点,阐述了一种针对石化行业的工控安全纵深防御体系方案。该方案从内建安全、边界防护、应急容灾等多个角度实现对石化工厂生产网络的安全防护部署,结合工控安全管理与应急措施,实现石化工厂的整体工控安全纵深防御体系的设计。

As the digitization of the petrochemical industry continues to deepen, the cybersecurity risks brought by digitization have become increasingly unignorable. The paper analyzes the current situation and needs of petrochemical network information security, combined with the characteristics of petrochemical plant production operations, and expounds an industrial control security defense-in-depth system for the petrochemical industry. The solution realizes the security protection deployment of the petrochemical plant’s production network from multiple perspectives such as built-in security, boundary protection, and emergency disaster recovery. It combines industrial control safety management and emergency measures to realize the design of the overall industrial control security defense-in-depth system of the petrochemical plant.