基于电力行业的工业控制系统安全研究

Research on security of industrial control system based onpower industryAbstract:In the era of industrialization and information,industrial control security incidents aremore and more,among which the power industry is seriously affected.For example,in 2003,Longquan station in China used notebook debugging equipment in the operation and maintenanceprocess,but connected to the extemal network without permission,resulting in the host in thestation infected with virus;in 2010,Iran's "earthquake network virus incident";in 2015,Ukraine's"power grid incident",all of which are related to the power industry The ability of safetyprotection is under great pressure.On the other hand,China is the biggest victim of cyber attacksin the world.Since 2009,the number of cyber attacks has increased 15 times,and more than 30%of them are aimed at national infrastructure systems such as the power industry.In recent years,domestic safety equipment manufacturers have developed rapidly andlaunched many safety products and service solutions.Although they have played a certain role,they are not able to meet the actual production environment of industrial control system,often"Treating the symptoms and not the disease".In fact,industrial control system is a vertical highlyintegrated system.Domestic and foreign manufacturers have not been able to do the same in-depthprotection technology as the horizontal protection technology,nor have an integrated safetyequipment.They always overemphasize the safety of a certain module or weakness.Safety is not a politically correct project.The production environment such as substations andpower plants has a high lag.The lag here is mainly aimed at the advanced level of safetyprotection ability and production environment.Most of the equipment,hosts,operating systems,etc.are relatively old.For industrial control networks,high availability takes precedence over highreliability,which leads to the lack of govemance in many times The fundamental situation.Based on the background of electric power industry,this paper analyzes the main securityproblems existing in the industrial control system at this stage,and constructs a set of securityprotection system suitable for the current situation of electric power industry,so that it can bereplicated for other industrial control systems.Key words:industrial control safety,replicability,solutions