信息安全研究 ›› 2016, Vol. 2 ›› Issue (5): 435-441.

• 网络安全标准化专题 • 上一篇    下一篇

国内外工业控制系统信息安全标准研究

邸丽清   

  1. 中国信息安全测评中心
  • 收稿日期:2016-05-17 出版日期:2016-05-15 发布日期:2016-05-17
  • 通讯作者: 邸丽清
  • 作者简介:博士,副研究员,主要研究方向为工业控制系统信息安全. dilq@itsec.gov.cn

Research on the Domestic and Foreign Standards for ICS Information Security

  • Received:2016-05-17 Online:2016-05-15 Published:2016-05-17

摘要: 工业控制系统信息安全问题日益突出,工业控制系统信息安全的保障迫切需要完善的标准体系作为支撑,因此针对国内外工业控制系统信息安全标准体系的研究显得尤为重要.首先通过研究国外工业控制系统信息安全相关标准、指南及行业规范,分析其体系框架及安全技术要求,总结了国外标准体系的特点;其次通过分析国内工业控制系统信息安全标准及行业规范的现状和特点,提出了我国目前标准体系研究存在的一些不足,并有针对性地给出相关建议,为进一步完善国内工业控制系统信息安全标准体系提供参考.

Abstract: Industrial control system (ICS) is widely used in various industries in electrical, petrochemical, water treatment, railway and so on. ICS gradually becomes the target of cyberattacks due to the open and important mission of itself. Lots of cyberattack events in recent years, such as "Stuxnet" virus, "Flame" virus and Trojan attack for Ukrainian power grid, have proven that the cyberattack threats for ICS are increasingly upgraded. The perfect ICS information security standards system are urgently needed to build for the information security assurance of ICS as a support. So the research on the domestic and foreign information security standard system for ICS is particularly important. Firstly, the characteristics of foreign standard system are summarized through the study on the technical framework and technical requirements of the foreign ICS information security standards, guidelines and norms. Secondly, the characteristics of the domestic ICS information security standards and norms are analyzed by summarizing the development trends of the domestic ICS information security standards. Finally, some existing deficiencies of the current domestic research on the ICS information security standard system are presented, and some suggestions for the further improving domestic standard system are given.