工业控制系统安全风险分析与对策

Security Risk Analysis and Countermeasures of Industrial Control System ★王迎,许剑新 浙江国利网安科技有限公司

工业控制系统广泛应用于核电、火电、炼油、石化等牵涉国民经济核心地位的主要基础设施,是确保这些重要装置安全稳定高效运行的核心装备,其安全问题(Safety)和安防问题(Security)一直是从事自动化控制系统研发人员极为关注的核心问题。自上世纪80年代以来,工业控制系统核心技术的发展一直都随着网络技术、软件技术、通信技术的快速发展而发展,工业控制系统也正在向网络化、开放式、分布式方向发展和演化,并且逐步与计算机网络相融合。因此工业控制系统安全问题和安防问题就与网络技术、通信技术和软件技术密不可分,一定会存在网络安全问题。本文针对工业控制系统的体系结构和技术特点,重点分析工业控制系统的安防问题,指出可能存在的安全隐患,并与IT网络安全进行差异性比较。最后,通过分析工业控制系统实施安全防护的可行性及关键技术,归纳并提出了工业控制系统安全防护对策,指出建立安全防护体系的必要性、可行性和重点方向。

Industrial control systems(ICS)are widely used in the critical infrastructures in nuclear power,thermal power,oil refining and petrochemical that are very related to the national economy.They are the core equipments to ensure the safe,stable and efficient operations of these critical infrastructures.The safety and security issues of ICS have always been a great concern to the automation R&D engineers.Since the 1980 s,the core technology of ICS has been developing with the rapid development of network,software and communication technologies.Industrial control system is becoming more open,networked and distributed,and gradually integrated with computer networks.Therefore,the safety and security issues of ICS are inseparable from the network,communication and software technologies.The network security problems will always exist.Combining with the architecture and technical characteristics of ICS,this paper mainly analyses the security issues of ICS,pointing out potential security risks and differences in comparison with IT network security.Finally,by analyzing the feasibility and key technologies of implementing the ICS security,we summarize and put forward the specific protection countermeasures.The necessity,feasibility and key directions of establishing a security protection system are also provided.