关键基础设施面临的信息安全挑战及对策建议_冯伟.pdfVIP

·策略探讨 StrategiesDiscussed 关键基础设施 面临的信息安全挑战 及对策建议 冯 伟 （工业和信息化部赛迪智库信息安全研究 所 北京 100846） 摘 要 近年来，随着关键基础设施控制系统的标准化、智能化、网络化发展，针对关键基础设施的网络攻击日益 【 】 增多。电力、石化、轨道交通等涉及国计民生的关键基础设施一旦被攻击，很可能造成灾难性后果。关键基础设施信 息安全成为悬在各国政府头上的达摩克利斯之剑，采取措施加强其信息安全保障能力势在必行。本文首先介绍了关 键基础设施的基本概念以及关键基础设施中应用的典型工业控制系统，分析了关键基础设施信息安全事件的特点， 阐述了工业控制系统面临的信息安全挑战，并针对这些挑战提出了相应的措施建议。 关键词 关键基础设施；信息安全；措施建议 【 】 中图分类号 文献标识码 O242;F830.9 A 【 】 【 】 Information Security Challenges and Corresponding Suggestions of Critical Infrastructure in China Feng Wei （CCID Think tank, China Center of Information Industry Development Beij ing 100846） 【 】Recently, with development of novel information technologies, the control system utilized in critical infrastructures become more and more Abstract standardized, intelligent and networked. Furthermore, the attacks from internet and other networks have been sharply increased. Critical infrastructures, such as power supply, chemical industry and rail transportation, are extremely important to civilization safety and national security. It is necessary for nations to take actions on critical infrastructure security to improve the capability of ensuring network security of them. In this paper, the related conceptions of critical infrastructure and the typical control systems are introduced, and the characteristics of critical infrastructure security events are analyzed. Furthermore, the challenges faced by critical infrastructures are introduced and relevant suggestions are proposed based on challenges. 【Keywords】critical infrastructure; information security; suggestions 1 关键基础设施的相关定义 控制系统或工业控制系统 （Industrial Control