火力发电厂工控系统安全现状分析
|
摘要
信息技术在工控系统中的广泛应用,逐步打破了工控网络环境的封闭性,暴露了工控系统的脆弱性。国内外层出不穷的工控安全事件,给国家安全敲响了警钟。我国工业基础设施安全正面临严峻挑战。基于上述背景,结合IEC 61508/IEC 61511、《火力发电厂相关设计规范》、《电力二次系统安全防护规定》等标准在火力发电厂的应用情况,分析了现阶段我国火力发电厂的功能安全和信息安全现状及其安全防护水平,指出了目前火力发电厂工控系统的主要安全问题和挑战。提出了从设备级、系统级、管理级三个角度,分层和协调融合考虑系统本体安全、被动防护与主动防护相结合的安全保障体系,以及全生命周期工控系统安全风险评估等工控系统安全运行的有效对策。
The wide application of information technology in industrial control systems has gradually broken the closeness of industrial control network environment and exposed the vulnerability of industrial control systems. The emergence of industrial control security incidents at home and abroad has sounded an alarm bell for national security. The industrial infrastructure security of our country is facing severe challenges. Based on the above background,combined with the application situation of IEC 61508/IEC 61511,the relevant design specifications of thermal power plants,and the " Safety Protection Regulations for Secondary Power Systems" in thermal power plants,the functional safety and information security status and safety protection level of thermal power plants in China at this stage are analyzed. The main safety problems and challenges of industrial control system in thermal power plants are pointed out. The effective countermeasures for the safe operation of industrial control systems,such as the safety of the system itself,the safety guarantee system combining passive protection with active protection,and the safety risk assessment of the whole life cycle industrial control system,are put forward from the three perspectives of equipment level,system level and management level.
The wide application of information technology in industrial control systems has gradually broken the closeness of industrial control network environment and exposed the vulnerability of industrial control systems. The emergence of industrial control security incidents at home and abroad has sounded an alarm bell for national security. The industrial infrastructure security of our country is facing severe challenges. Based on the above background,combined with the application situation of IEC 61508/IEC 61511,the relevant design specifications of thermal power plants,and the " Safety Protection Regulations for Secondary Power Systems" in thermal power plants,the functional safety and information security status and safety protection level of thermal power plants in China at this stage are analyzed. The main safety problems and challenges of industrial control system in thermal power plants are pointed out. The effective countermeasures for the safe operation of industrial control systems,such as the safety of the system itself,the safety guarantee system combining passive protection with active protection,and the safety risk assessment of the whole life cycle industrial control system,are put forward from the three perspectives of equipment level,system level and management level.
引文
[1]马欣欣.功能安全系统在火电厂的应用研究[J].中国仪器仪表,2011(1):13-16.
[2]朱明露.功能安全标准在电厂安全系统中的应用研究[J].中国仪器仪表,2015(9):29-31.
[3]颜丙建. QD公司工控系统信息安全管理研究[D].广州:广东工业大学,2017.
[4]刘盈.工业信息安全主动安全防护体系研究与应用[J].自动化博览,2018(4):58-61.
[5]孟强.大型火力发电厂工控系统安全防护体系研究[J].今日科技,2018(6):56-58.
[6]李成. IEC61508功能安全标准在电厂安全系统设计中的研究与应用[D].上海:上海交通大学,2010.
[7]杨晨.以“固隔监”思路捍卫工业智能化安全[J].信息安全与通信保密,2015(2):72-73.
[2]朱明露.功能安全标准在电厂安全系统中的应用研究[J].中国仪器仪表,2015(9):29-31.
[3]颜丙建. QD公司工控系统信息安全管理研究[D].广州:广东工业大学,2017.
[4]刘盈.工业信息安全主动安全防护体系研究与应用[J].自动化博览,2018(4):58-61.
[5]孟强.大型火力发电厂工控系统安全防护体系研究[J].今日科技,2018(6):56-58.
[6]李成. IEC61508功能安全标准在电厂安全系统设计中的研究与应用[D].上海:上海交通大学,2010.
[7]杨晨.以“固隔监”思路捍卫工业智能化安全[J].信息安全与通信保密,2015(2):72-73.