摘要
近年来全球工业信息安全事件频发,为加强油气管道SCADA系统的安全防护能力,提出基于资产、威胁源、脆弱性进行分析的工控安全风险分析方法。通过对系统中存在的资产进行整理归纳,找出系统面临的威胁源及存在的脆弱性利用途径,并结合某油气管道的调控中心及场站进行分析,从而找出系统可能存在的风险,为管理员部署系统安全防护措施提供参考依据。
In recent years,global industrial information security events occur frequently.In order to strengthen the security protection ability of oil and gas pipeline SCADA system,this paper proposes an industrial control security risk analysis method based on the analysis of assets,threat sources and vulnerability.By sorting out and summarizing the existing assets in the system,the threat sources and the existing vulnerability utilization ways of the system are found out.Combined with the analysis of the control center and the station of an oil and gas pipeline,the possible risks of the system are found out,which provides a reference for the administrator to deploy system security protection measures.
作者
刘锐
薛金良
包贤晨
王永军
郑承洧
Liu Rui;Xue Jinliang;Bao Xianchen;Wang Yongjun;Zheng Chengwei(SINO-PIPELINE International Company,Beijing 100029,China;Zhejiang Guoli Security Technology Co.,Ltd.,Ningbo 315000,China)
出处
《信息技术与网络安全》
2021年第11期1-7,共7页
Information Technology and Network Security
关键词
工业控制系统
风险分析
油气管道
industrial control system
risk analysis
oil and gas pipelines
