基于“零信任”的工控系统安全关键技术探讨

Discussion on Key Technologies of Industrial Control Systems Security Based on“Zero Trust”

工控系统广泛应用于关键基础设施,如电力、能源、交通、智能制造等涉及国计民生的关键领域,一旦工控系统受到恶意入侵或攻击,将造成严重后果,严重威胁国家安全。因此,近年来工控系统安全问题越来越受到相关主管部门和企业的重视,关于工控安全的技术研究也越来越广泛深入。本文基于在IT安全领域已经得到验证和应用的“持续验证,永不信任”的零信任安全理念,从工控安全系统集中管理、用户身份认证、工控资产接入控制、终端安全防护技术、工控指令访问控制、工控行为访问控制、USB外设接入控制、工控安全态势分析等维度,全面阐述了工控安全领域的“零信任”关键技术,为“零信任”理念在工控安全领域的实施提供参考。

Industrial control systems Security are widely used in key infrastructure,such as electricity,energy,transportation,intelligent manufacturing,and other key areas related to national economy and people’s livelihood.Once the industrial control system Security is maliciously invaded or attacked,it will cause serious consequences and seriously threaten national security.Therefore,in recent years,the safety issues of industrial control systems Security have been increasingly valued by relevant regulatory departments and enterprises,and the technical research on industrial control safety has become more extensive and in-depth.This article is based on the zero trust security concept of“continuous verification,never trust”that has been verified and applied in the field of IT security.It covers centralized management of industrial control security systems,user identity authentication,industrial control asset access control,terminal security protection technology,industrial control instruction access control,industrial control behavior access control,USB peripheral access control The analysis of industrial control safety situation and other dimensions comprehensively elaborated on the“zero trust”core technology in the field of industrial control safety,providing reference for the implementation of the“zero trust”concept in the field of industrial control safety.