Research of the Security Situation about Industrial Control Information System

doi:10.3969/j.issn.1671-1122.2016.09.034

Abstract

Abstract:

In recent years, industrial control information system become more and more important in industrial area. Many industrial control information system (such as SCADA, DCS, PLC) become the key part of an industrial product area. We pay more attention to the industrial information security problems. In the paper, we analyzed the main security status of industrial control information system in Chinese west big city by plenty of real industrial enterprise statistical data and level protection testing and evaluation data. We analyzed the main status, protection method and problem of these system. We also give some advice about how to improve the system status.

Key words: industrial control information system, classified protection, DCS, SCADA, PLC

CLC Number:

TP309

Yu ZENG, Jinquan GUO. Research of the Security Situation about Industrial Control Information System[J]. Netinfo Security, 2016, 16(9): 169-172.

Figures/Tables 3

References 14

[1]	GB/T30976.1~.2-2014工业控制系统信息安全[S]. 北京:标准出版社,2014.
[2]	彭勇,江常青,谢丰,等.工业控制系统信息安全研究进展[J]. 清华大学学报:自然科学版,2012(10):1396-1408.
[3]	王群. 基于安全域的信息安全防护体系研究[J]. 信息网络安全,2015(9):206-210.
[4]	张敏,张五一,韩桂芬,等.国内外工业控制系统信息安全标准研究[J].中国标准化论坛,2014:964-968.
[5]	熊琦,彭勇,戴忠华.工业控制系统信息安全路线图研究[J].中国信息安全,2012(10):71-74.
[6]	何之栋,裘坤,钟晨,等.工业控制系统的信息安全问题研究[J].工业控制计算机,2013,26(10):1-4.
[7]	武传坤. 身份证件的安全要求和可使用的密码学技术[J]. 信息网络安全,2015(5):21-27.
[8]	夏春明,刘涛,王华忠,等.工业控制系统信息安全现状及发展趋势[J].信息安全与技术,2013, 4(2):13-18.
[9]	GB/T22239-2008信息系统安全等级保护基本要求[S], 北京:标准出版社,2008.
[10]	陈明奇,洪学海,王伟,等. 关于网络安全和信息技术发展态势的思考[J]. 信息网络安全,2015(4):1-4.
[11]	YC/T494-2014 烟草工业企业生产网与管理网网络互联安全规范[S]. 北京:中国标准出版社,2014.
[12]	张敏,张五一,韩桂芬.工业控制系统信息安全防护体系研究[J].工业控制计算机,2013,26(10):25-27.
[13]	魏可承,李斌,易伟文,等.工业控制系统信息安全防护体系规划研究[J].自动化仪表,2015,36(2):49-50.
[14]	周黎辉. 工业控制系统信息安全保护体系研究与探讨[J].信息安全与技术,2015,6(6):46-47.

[1]	Li MA. Research on the Quantitative Calculation Method Resulting from the Conclusions in the Assessment of Classified Protection of Cybersecurity [J]. Netinfo Security, 2020, 20(3): 1-8.
[2]	Yuan TAO, Tao HUANG, Moyan LI, Wei HU. Research on Log Audit Analysis Model of Cyberspace Security Classified Protection Driven by Knowledge Map [J]. Netinfo Security, 2020, 20(1): 46-51.
[3]	Guogang ZHENG. Implementation Methods and Technical Measures for Security Inspection of Important Information Systems [J]. Netinfo Security, 2019, 19(9): 16-20.
[4]	Guangyong CHEN, Guobang ZHU, Chunling FAN. Information Security Technology—Evaluation Requirement for Classified Protection of Cybersecurity(GB/T 28448-2019) Standard Interpretation [J]. Netinfo Security, 2019, 19(7): 1-8.
[5]	Wenli SHANG, Long YIN, Xianda LIU, Jianming ZHAO. Construction Technology and Application of Industrial Control System Security and Trusted Environment [J]. Netinfo Security, 2019, 19(6): 1-10.
[6]	Wenli SHANG, Xiule ZHANG, Xianda LIU, Long YIN. Construction Method and Verification of Local Trusted Computing Environment in Industrial Control Network [J]. Netinfo Security, 2019, 19(4): 1-10.
[7]	Bin DUAN, Lan LI, Jun LAI, Jun ZHAN. Research on Hardware Vulnerabilities Mining Method for Industrial Control Device Based on Dynamic Taint Analysis [J]. Netinfo Security, 2019, 19(4): 47-54.
[8]	Li MA, Guobang ZHU, Lei LU. Baseline for Classified Protection of Cybersecurity (GB/T 22239-2019) Standard Interpretation [J]. Netinfo Security, 2019, 19(2): 77-84.
[9]	Meihong LI, Xiaochen QI, Qianqian WU. Smart Grid Wireless Communication Data Encryption Transmission Scheme Based on Dynamic Key [J]. Netinfo Security, 2019, 19(12): 10-21.
[10]	Zhenfeng ZHANG, Zhiwen ZHANG, Ruichao WANG. Model of Cloud Computing Security and Compliance Capability for Classified Protection of Cybersecurity 2.0 [J]. Netinfo Security, 2019, 19(11): 1-7.
[11]	Jie QU, Chunling FAN, Guangyong CHEN, Jintao ZHAO. Research on Establishment of Network Security Service Ability System for A New Era [J]. Netinfo Security, 2019, 19(1): 83-87.
[12]	LI Tao, ZHANG Chi. Research on Network Security Risk Model Based on the Information Security Level Protection Standards [J]. 信息网络安全, 2016, 16(9): 177-183.
[13]	SONG Guojiang, XIAO Ronghua, YAN PEI. The PLC of Industrial Control System Facing Security Threats from Cyberspace [J]. 信息网络安全, 2016, 16(9): 228-233.
[14]	WANG Qun. Research on Information Security Protection System Based on Security Domain [J]. 信息网络安全, 2015, 15(9): 206-210.
[15]	YUAN Hui-ping. Research and Practice of the Classified Protection System of the Bank Data Center [J]. 信息网络安全, 2015, 15(4): 86-89.