“互联网+”新形态下工控系统的网络安全防护策略 the industrial control system network security protection strategy based on the “internet +” new form.pdfVIP

2016年第5期　 　 　 　 　 　 　 　 　 　 　 　 　 　 　 工业仪表与自动化装置 ·15 · “互联网+”新形态下工控系统的 网络安全防护策略 崔　 勇 (中国神华煤制油化工有限公司鄂尔多斯煤制油分公司,内蒙古 鄂尔多斯017209) 　 　 摘要:该文基于“互联网+”的新形态环境,提出了安全防护从被动抵御转变为主动防护的思 路,通过事故案例与现有技术相结合的方式,对工控系统网络安全病毒泛滥的漏洞,网络本身结构 上的漏洞,操作系统安全漏洞,以及安全策略和管理流程漏洞等不同不安全状况进行了分析。 提出 了改进网络安全的对策:部署防病毒服务系统,搭建EBR 解决方案,改善网络结构,及时更新微软 操作系统和监控软件推出的补丁,制定行之有效的控制系统的管理制度,引用较先进的KVM安全 机制。 关键词:工控系统;网络安全;防火墙;网络隔离装置;防病毒系统;EBR方案;操作系统 中图分类号:TP309　 　 文献标志码:A　 　 文章编号:1000-0682(2016)05-0015-05 The industrial control system network security protection strategy based on the “Internet +” new form CUI Yong (China Shenhua Coal toLiquid and Chemical Ordos CoalLiquefaction Company,InnerMongolia Ordos017209,China) 　 　 Abstract:Thepaper isbased onthe “Internet+” a newformenvironment,put forward security from passive intoactiveprotectionagainstthinking,throughthecombinationoftheaccidentcasesandpractical technology,the virus spread on network security vulnerabilities,network structure itself loopholes,oper- ating system security vulnerabilitiesand security strategy andmanagementprocessof differentvulnerabili- ty unsafe conditions are analyzed.Proposed improved network security countermeasures:deployment of anti virus service system,build EBR solutions,to improve the network structure,update Microsoft oper- ating systemsand monitoring software launched patch,formulated an effective control system in the man- agement system, reference more advanced KVM security mechanism. Hope for enterprises to achieve safe,reliable,stable,long cycle operation of industrial control system to provide a certain strategy. 　 　 Key words:industrial control system;network security;firewall;network isolation device;anti virus system;EBR