网络安全标准在石油石化工业控制系统中的应用

Application of Cybersecurity Standards in Industrial Control System of Petroleum and Petrochemical Industry

围绕石油石化行业工业控制系统对于稳定性、安全性、可靠性的需求,遵循GB/T 22239—2019、GB/T 28448—2019、GB/T 25070—2019等国家网络安全等级保护核心标准,建设某油田工业控制系统安全防护体系。通过增强该油田工业控制系统安全防护能力,完善油田工业控制系统网络纵深防御,实现石油石化行业工业控制系统深度安全主动防御应用示范,形成行业应用模板,解决石油石化行业在信息化建设过程中业务系统与运维管理方面所面临的网络安全问题,为我国石油石化行业的系统安全建设提供技术支撑。

Focusing on the demand for stability,safety and reliability of industrial control system in petroleum and petrochemical industry,the cybersecurity protection of industrial control system in an oil field is constructed in accordance with GB/T 22239-2019,GB/T 28448-2019 and GB/T 25070-2019 and other national standards for classified protection of cybersecurity.The cybersecurity protection capability of the industrial control system in the oil field is enhanced,the cybersecurity in-depth defense of the industrial control system in the oil field is improved,the application demonstration of in-depth security and active defense of the industrial control system are realized in the petroleum and petrochemical industry,so that the industry application template is formed,and the cybersecurity problems,which are faced by the business system and operation management,are solved in the process of information construction at the petroleum and petrochemical industry,so that technical support are provided for the system safety construction of national petroleum and petrochemical industry.