摘要
物联网是一种将虚拟网络世界与现实物理世界相结合的综合信息技术,具有广泛的应用和庞大的潜在市场.但是,物联网安全方面的现有技术远不能满足产业的需求.本文指出物联网的安全问题与传统网络环境的信息安全(称为IT安全)有着本质区别.传统网络安全保护的主要是信息,因此使用IT安全技术.本文强调物联网系统除了要保护信息安全外,还需要对操作进行安全保护,这类技术称为OT安全技术.本文对OT安全的概念和内涵进行了描述,指出OT安全是信息转化为物理活动行为的安全问题,其安全防护的目标与传统的信息安全保护不同,尽管在实现技术方面有许多类似的技术.本文分析了IT安全与OT安全的特性,这些特性包括物联网中的IT技术与OT技术相互作用和相互影响,并阐述常用的IT安全与OT安全保护技术.
The Internet of Things(IOT)is treated as a comprehensive information technology that combines the cyberspace and the physical real world,and has wide applications and huge potential market.However,current IoT security techniques do not meet the industrial application requirement.This paper points out the essential differences between the IoT security and traditional information security(known as IT security)in networking environment.Traditional network security is mainly for information security protection,hence IT security techniques apply.This paper emphasizes that,apart from information security protection,IoT security also includes operational security protection,known as OT security protection.This paper describes the concept and the content of OT security,pointes out that the OT security is related to the conversion from information to physical operation,of which the security protection goals are different from those of traditional information security protection,although there are many common techniques in practical implementations.This paper analyzes some characteristics of IT security and those of OT security,including how the IT security techniques and OT security techniques affect with each other,and points out the essential differences between the IT security protection techniques and those of OT security.
作者
武传坤
王九如
崔沂峰
WU Chuan-Kun;WANG Jiu-Ru;CUI Yi-Feng(School of Information Science and Engineering,Linyi University,Linyi 276000,China;School of Logistics,Linyi University,Linyi 276000,China)
出处
《密码学报》
CSCD
2020年第1期134-144,共11页
Journal of Cryptologic Research
基金
山东省重点研发计划(重大科技创新工程)项目(2019JZZY010134)。
关键词
物联网
信息安全
操作安全
Internet of Things
IT security
OT security
