油气田工业控制系统架构与安全防护策略设计

Design of Architecture of Industrial Control System and Safety Protection Strategy of Oil and Gas

物联网多样性应用给通信协议简单、缺乏安全防御能力的控制系统带来严重威胁,针对油气田生产场站点多面广、分布零散,对每个控制系统进行安全加固需要巨额投入的短板,结合工业控制与物联网应用现状,分析了工业控制系统存在的风险,提出了关于系统架构、安全计算环境、安全区域边界、安全通信网络的安全保护策略设计。实际应用表明:采用该防护策略,在低成本条件下可有效提升控制系统安全防护水平。

The diversified application of the Internet of Things brings serious threats to control systems with simple communication protocols and lack of security and defense capabilities.Aiming at the disadvantage that the gas&oil field production site has a wide range of areas and scattered distribution,huge amount of investment needed to strengthen the security for each control system,combining with the application status of industrial control and Internet of Things,the risks of industrial control system is analyzed,and the design of security protection strategies for system architecture,secure computing environment,secure zone boundary and secure communication network are put forward.Practical application shows that the protection strategy can effectively improve the security protection level of the control system at low cost.