摘要
结合核电DCS网络安全防护架构,通过研究基于逻辑隔离、物理隔离等隔离技术的边界隔离解决方案,在核电DCS与外部网络之间实现不同区域边界的有效隔离,从而建立安全边界,保护DCS免受外部网络攻击和入侵的威胁,确保核电厂安全稳定运行。解决方案已在多个核电基地得到良好应用,可为核电其他工控系统以及核电以外的其他高安全领域网络安全边界隔离提供借鉴及经验。
Combined with the overall solution of cyber security protection of nuclear power industrial control system,this paper studies the boundary isolation scheme of logical isolation and physical isolation to achieve effective isolation of different regional boundaries between the industrial control system of nuclear power plant and the external network,so as to establish regional security boundaries to protect the industrial control system from the threat of external cyber attacks and intrusions and ensure the safe and stable operation of nuclear power plant.The relevant scheme has been well applied in a number of nuclear power bases,and can provide reference and experience for the boundary isolation of cyber security protection in other high-security fields besides nuclear power.
作者
李若兰
李启凌
李柯
农政林
马飞
Li Ruolan;Li Qiling;Li Ke;Nong Zhenglin;Ma Fei(CGN Power Co.,Ltd.,Guangdong,Shenzhen,518031,China;Shanghai Engineering Science&Technology Co.,Ltd.,Shanghai,200241,China)
出处
《仪器仪表用户》
2023年第11期68-72,共5页
Instrumentation
关键词
核电厂
DCS
逻辑隔离
安全区域边界
网络安全
边界隔离
nuclear power plant
digital control system
logical isolation
security zone boundary
cyber security
boundary isolation