论文部分内容阅读
随着计算机技术网络技术的发展,特别是互联网及社会公共网络平台的快速发展,在“两化”融合的行业发展需求下,DCS系统广泛应用于各类行业。由于DCS工业控制系统在初建设时更多的是考虑各自系统的可用性,并没有考虑系统之间互联互通的安全风险和防护建设,造成病毒、木马等安全威胁向工控领域迅速扩散。为了简要介绍目前工控系统的安全问题,本文首先从DCS工业控制系统的定义和三层结构出发,引出了DCS工控系统的安全问题,阐述了该安全问题的分布特点。然后从技术角度,就攻击者与攻击途径、网络攻击的检测与响应、系统安全建模与脆弱性分析等多个重要问题进行了详细的讨论。最后,提出了纵深防御的安全理念,并以此为指导,构建了由边界系统、防御系统、防卫系统等三部分组成的综合防御体系,旨在为工业控制系统提供全方位、多层次、完整生命周期的保护。
With the development of computer technology network technology, especially the rapid development of Internet and social public network platform, DCS system is widely used in various industries under the development needs of industry integration of “two cultures”. As DCS industrial control system in the early construction more is to consider the availability of their systems, and did not consider the interconnection between systems security risks and protection of construction, resulting in viruses, Trojans and other security threats to the rapid proliferation of industrial areas. In order to briefly introduce the current industrial control system safety issues, this paper first from the DCS industrial control system definition and three-tier structure, leads to the DCS industrial control system security issues, described the distribution of the security features. Then from a technical point of view, a detailed discussion is given on several important issues such as attacker and attack path, detection and response of network attack, system security modeling and vulnerability analysis. Finally, the defense concept of defense in depth is put forward, and as a guide, a comprehensive defense system composed of three parts: the border system, the defense system and the defense system is constructed, which aims to provide the industrial control system with all-round, multi-level and complete Life cycle protection.