关键基础设施面临的信息安全挑战及对策建议

近年来,随着关键基础设施控制系统的标准化、智能化、网络化发展,针对关键基础设施的网络攻击日益增多.电力、石化、轨道交通等涉及国计民生的关键基础设施一旦被攻击,很可能造成灾难性后果.关键基础设施信息安全成为悬在各国政府头上的达摩克利斯之剑,采取措施加强其信息安全保障能力势在必行.本文首先介绍了关键基础设施的基本概念以及关键基础设施中应用的典型工业控制系统,分析了关键基础设施信息安全事件的特点,阐述了工业控制系统面临的信息安全挑战,并针对这些挑战提出了相应的措施建议.

Information Security Challenges and Corresponding Suggestions of Critical Infrastructure in China

Recently, with development of novel information technologies, the control system utilized in critical infrastructures become more and more standardized, intelligent and networked. Furthermore, the attacks from internet and other networks have been sharply increased. Critical infrastructures, such as power supply, chemical industry and rail transportation, are extremely important to civilization safety and national secudty. It is necessary for nations to take actions on cdtical infrastructure secudty to improve the capability of ensuring network security of them. In this paper, the related conceptions of critical infrastructure and the typical control systems are introduced, and the characteristics of criUcel infrastructure security events are analyzed. Furthermore, the challenges faced by critical infrastructures are introduced and relevant suggestions are proposed based on challenges.