2015 NSFOCUS ICS Security Framework Whitepaper 2015 绿盟科技工控安保框架 白皮书 m o c . 5 h t i g b u © 2016 绿盟科技 关于绿盟科技 北京神州绿盟信息安全科技股份有限公司（简称绿盟科技）成立于 2000 年 4 月，总部 位于北京。在国内外设有 30 多个分支机构，为政府、运营商、金融、能源、互联网以及教育、 医疗等行业用户，提供具有核心竞争力的安全产品及解决方案，帮助客户实现业务的安全顺 m o 畅运行。 基于多年的安全攻防研究，绿盟科技在网络及终端安全、互联网基础安全、合规及安全 c . 5 管理等领域，为客户提供入侵检测 / 防护、抗拒绝服务攻击、远程安全评估以及 Web 安全 防护等产品以及专业安全服务。 北京神州绿盟信息安全科技股份有限公司于 2014 年 1 月 29 日起在深圳证券交易所创 业板上市交易。 股票简称：绿盟科技 b u 股票代码：300369 关于作者 王晓鹏 Email: [email protected] h t i g 绿盟科技工控安全项目总监，长期从事工控安全研究，具有多年的工控安全项目经验，参与 多项国家工控安全标准的制定；工控安全产业联盟理事、国家工控安全工程实验室技术专家委员。 侯云晓 绿盟科技高级咨询顾问，长期从事工控安全研究，参与并主持工业控制系统相关的安全服务 解决方案开发，参与多项针对大型工控设施的安全评估和咨询服务。 冯冲 Email: [email protected] 绿盟科技烟草行业资深安全顾问，主持和参与多项烟草行业的信息安全规划和建设项目。 王涛 Email: [email protected] 绿盟科技能源行业安全顾问，主持和参与多项能源行业的信息安全规划和建设项目。 目录 01 工业控制系统安全新态势 ···························································· 1 1.1 1.1.1 1.1.2 1.1.3 1.2 1.2.1 1.2.2 1.2.3 工业信息化的新态势 ············································································ 2 工业 4.0 ······································································································································· 2 能源互联网 ································································································································· 2 “互联网 +”时代的工控安全 ··································································································· 3 工业控制系统安全的新态势 ··································································· 3 国际安全形式的变化 ·················································································································· 4 工业控制系统安全需求的变化 ··································································································· 6 c . 5 02 工业控制系统安全技术演进路线图 ················································ 7 2.1 2.2 攻击技术路线 ····················································································· 8 工控安全技术的发展 ············································································ 9 2.3 总体安全保障框架 ·············································································· 11 b u 2.4 电力行业工控安全解决思路 / 保障框架 ····················································12 2.4.1 2.4.2 2.4.3 2.4.4 2.4.5 2.5 2.5.1 2.5.2 2.5.3 2.5.4 2.6 2.6.1 2.6.2 2.6.3 2.6.4 火电控制系统逻辑架构 ············································································································ 12 h t i g 主要控制系统之间的逻辑关系 ································································································· 13 发电控制系统面临的主要安全威胁 ························································································· 14 安全防护的原则 ························································································································ 16 安全防护的思路 ························································································································ 17 石油、石化行业安全解决思路 / 保障框架 ·················································20 石油石化行业综述 ···················································································································· 20 油气田工业控制系统现状 ········································································································ 21 安全风险分析···························································································································· 23 安全防护思路···························································································································· 26 烟草行业安全解决思路 ········································································26 卷烟生产应用系统架构 ············································································································ 27 烟草工业企业生产网架构 ········································································································ 28 烟草行业工业控制安全风险描述 ····························································································· 29 烟草工业控制网络安全防护思路 ····························································································· 35 03 总结 ····················································································· 40 3.1 m o 国家政策的指引 ·························································································································· 5 工控安全发展综述 ··············································································40 04 附录 ···············································································