Abstract: A project which produces hundreds of thousands of tons of engineering plastics annually by a new energy chemical enterprise, including two sets of DCS, two sets of SCADA, and industrial control systems such as PLC and SIS, which constitute a fairly largescale industrial control network. Faced with the growing threat of industrial control network security, the enterprise has presented new requirements for strengthening industrial control security protection. Based on the analysis of the current industrial control system and network of enterprises, and theory of defense in depth, this paper designs the security protection solution of the overall industrial control network, and gives the concrete implementation measures.

Key words: DCS, SCADA, PLC, SIS, industrial control system, industrial control network, security of industrial control system, defense in depth

摘要： 某新能源化工企业年产几十万吨工程塑料的项目，包括2套DCS、2套SCADA以及PLC和SIS等工控系统，组成了颇具规模的工控网络.面对日益增长的工控网络安全威胁，该企业对加强工控安全防护提出了新需求.通过对企业目前工控系统和网络的分析，基于纵深防御体系的思想，对总体工控网络的安全防护解决方案进行了设计，并给出了具体落实措施.

关键词: DCS, SCADA, PLC, SIS, 工业控制系统, 工业控制网络, 安全防护, 纵深防御