武钢信息系统整体安全防御体系的研究与应用.pdfVIP

武钢信息系统整体安全防御体系的研究与应用 樊贵先 吴新春 段 巍 姚新华 孙 辉 (武汉钢铁（集团）公司, 武汉 430083) 摘 要 随着武汉钢铁（集团）公司整体产销资讯系统一、二期的成功上线，信息化水平不断提高，冶金自动化程 度不断提高,工厂过程控制系统与工厂管理信息系统越来越紧密,针对管控网络一体化程度的提高，过程控制系统与 管理信息系统的网络安全问题显得越来越突出，由于管理信息系统的安全问题导致过程控制系统停机，从而直接影 响生产的现象时有发生，但未引起重视。本文主要讨论了在武钢这样比较复杂环境下，如何进行信息安全风险评估, 如何搞好信息安全规划管理和风险控制，保证生产正常进行，及如何实施信息安全工程。 关键词 信息安全 风险评估 安全规划 安全管理 Research and Aplication of Global Security Protection System of WISCO. Information System Fan Guixian Wu Xinchun Duan Wei Yao Xinhua Sun Hui （Science Technology Innovation Dept. of WISCO.,Wuhan,430083 ） Abstract Along with the Wuhan Iron and steel （group ）Corporation overall production and marketing information is successes on line,the information level unceasingly enhances, the automaticity unceasingly enhances, the factory processcontrol system and the plant management information system is more andmore close, controls the network integration degree in view of the tube the enhancement, the process control system and the management information system network security question appears more and more prominently, Due to the management information system security problem causes the process control system engine Down , directly affects the production the phenomenon to occur, but has not brought to the attention. This paper discussed under the quite complex environment In WISCO., how carries on the information security risk assessment, how to improve the information security planning management and the risk control, ensure the production normally carries on, and how implement the information security project. Key words information security,risk assessment,security planning,security management 1 引言 武汉钢铁