5G+工业互联网安全防护设计与实践

Exploration and Practice of 5G+Industrial Internet Security Protection

5G融入工业互联网的广度和深度持续增加,不仅促进了工业升级和技术水平提升,还有助于产业创新与发展,但随之也产生了一些安全问题,暴露在互联网的工业设备长期遭受恶意嗅探、外界攻击,抵御和对抗攻击的能力也不足。这些安全问题不但会导致设备运行故障,还有非常大的信息安全风险,严重影响工业互联网的安全和健康发展,所以我们亟须引入新的安全技术和理念来应对新的安全威胁。由于5G+工业互联网的场景众多,其面临的安全防护情况也不尽相同。文本基于笔者参与的国内某工厂的5G+工业互联网安全防护建设项目,以点带面,分析并介绍MEC、UPF、安全中台、安全能力池等方面的安全建设方案,总结并分享相关实践经验,为今后5G+工业互联网打造全面一体化的安全体系,实现定制化、集约化、开放化的安全防护提供借鉴和参考依据。

The breadth and depth of 5G integration into the industrial Internet continue to increase,it not only promotes industrial upgrading and technological level,but also contributes to industrial innovation and development.However,some security problems also arise.Industrial equipment exposed to the Internet has been subjected to malicious sniffing and external attacks for a long time,and the ability to resist and combat attacks is also insufficient.These security problems will not only lead to equipment operation failure,but also a very large information security risk,which seriously affects the safety and healthy development of industrial Internet.Therefore,we urgently need to introduce new security technologies and concepts to deal with new security threats.Due to the numerous scenes of 5G+industrial Internet,its security protection situation is also different.Based on the 5G+industrial Internet security protection construction project of a domestic factory participated by the author,the text analyzes and introduces the security construction schemes in MEC、UPF、Security Platform、Security Capability Pool and other aspects from point to area,summarizes and shares relevant practical experience,so as to create a comprehensive and integrated security system for 5G+industrial Internet in the future,Provide reference and basis for realizing institutionalized,intensive and open safety protection.