工业控制系统信息安全防护

阐述了ICS系统区别于传统IT信息系统的特点，分析了ICS系统所面临的信息安全风险，针对这些风险从技术和管理2个层面提出了相应的安全防护体系。在技术层面上，设置防火墙防护、隔离工程师站、开展系统安全测试、部署网络监控；在管理层面上，实时维护并更新现有管理制度与安全技术标准等。上述安全防护体系已在某省电力公司工控机安全防护试点得到验证，证明其可行性，对电网工控机的安全防护具有一定借鉴意义。

Research on Information Security Protection of Industrial Control System

Different characteristics between industrial control system(ICS) and traditional IT information system are discussed, and information security risks faced by ICS are analyzed. A corresponding security protection system is proposed from both technology and management aspects. On technical side, it is suggested to employ measures including firewall protection, isolation of engineer stations, system security testing and network monitoring. On managerial side, it is recommended to maintain and update management systems and security technology standards in real time. The proposed security protection system has already been verified by industrial control computer security protection pilot projects in electrical company. The project demonstrates its feasibility and provides reference to IPC security protection in power grid.