摘要
随着供水智能化不断加快,供水关键网络设施和业务系统暴露面增大,导致其面临勒索软件、挖矿病毒以及黑客、敌对势力等威胁,给我国供水公共基础设施安全运行带来挑战。本文通过对智慧供水的关键网络设施和业务流程以及存在的网络安全风险进行分析,设计了智慧供水网络安全防护体系,该体系从安全技术和安全运营两个层面构建纵深防御体系,对智慧供水的生产监控层、调度管理层以及经营决策层进行防护设计,从而达到有效防护、全面监测、及时响应的效果,为后续智慧供水网络安全建设提供理论指导依据。
As the smart water supply system accelerates,critical network infrastructure and operational systems face increased exposure to threats such as ransomware,mining viruses,hackers,and hostile forces,presenting challenges to the secure operation of China's water supply public infrastructure.This article analyzes the key network infrastructure and business processes of smart water supply systems and identifies existing cybersecurity risks.It designs a comprehensive cybersecurity protection system for critical information infrastructure of smart water supply systems,building a layered defense system from two levels of security technology and security operations to protect the production monitoring,dispatch management,and business decision-making layers of smart water supply systems.The system achieves effective protection,comprehensive monitoring and timely response,providing theoretical guidance for future smart water supply network security construction.
作者
卢列文
李炜玥
马跃强
Lu Liewen;Li Weiyue;Ma Yueqiang(CEPREI,Guangzhou Guangdong,511300;Nsfocus Technologies Group Co.,Ltd.,Beijing,100086)
出处
《工业信息安全》
2023年第4期37-43,共7页
Industry Information Security
关键词
智慧供水
关键信息基础设施
安全风险
网络安全
安全防护
Smart Water Supply
Critical Information Infrastructure
Security Risks
Cybersecurity
Security Protection
