中国工程科学2023，Vol.25Issue(6)：126-136,11.DOI:10.15302/J-SSCAE-2023.06.008
工业控制系统安全防护技术发展研究
Development of Security Protection Technologies for Industrial Control System
摘要
Abstract
Industrial control system(ICS)is gradually transitioning from being closed and isolated to open and interconnected.The network threats to ICS are becoming highly hidden,strong-confrontation,and cross-domain in nature.Once subjected to cyber-attacks,industrial production will be directly affected.Consequently,network attacks on ICS and corresponding security protection technologies have attracted significant attention.This study focuses on the security protection issues of ICS.First,we analyzed the specific characteristics of ICS security protection,as well as the unclear and uncontrollable security challenges of ICS.The network attacks on ICS are summarized and analyzed,and then the security protection systems with a self-defense mode,such as border protection and defense in depth,are discussed.In view of the security challenges,the development ideas are given from the aspects of security and controllability of ICS and a novel security protection system of ICS,and key tasks and key technology research paths are as follows:establishing an autonomous and controllable ICS security ecology and a security assurance mechanism of foreign devices based on limiters,and exploring the new security protection system of ICS based on a self-defense plus guard mode,such that the security protection ability of ICS can be better improved.关键词
工业控制系统/安全防护/自主可控/新型防护体系/护卫模式Key words
industrial control system/security protection/autonomous and controllable/new security-protection architecture/guard mode引用本文复制引用
孙彦斌,汪弘毅,田志宏,方滨兴..工业控制系统安全防护技术发展研究[J].中国工程科学,2023,25(6):126-136,11.基金项目
中国工程院咨询项目"工业互联网安全技术战略研究"(2022-JB-04) （2022-JB-04）
国家自然科学基金项目(62072130) Chinese Academy of Engineering project"Development Strategy of Industrial Internet Security Technology"(2022-JB-04) （62072130）
National Natural Science Fund project(62072130) （62072130）
