Journal of Information Security Research ›› 2019, Vol. 5 ›› Issue (8): 734-739.

Previous Articles     Next Articles

Beijing Gas Group Industrial Internet Security Operation Platform Construction and Practice

  

  • Received:2019-08-09 Online:2019-08-15 Published:2019-08-09

北京燃气集团工业互联网安全运营平台建设与实践

王广清,韩金丽,方铁城,申彦龙   

  1. 北京市燃气集团有限责任公司
  • 通讯作者: 王广清
  • 作者简介:王广清,1970年,硕士,高级工程师,主要研究方向为数字化转型、网络安全、数据分析、项目管理、企业信息化管理 wangguangqing@bjgas.com 韩金丽,1967年,工学博士,教授级高级工程师,主要研究方向为网络安全与信息化 hanjl@bjgas.com 方铁城,1981年,硕士,中级工程师,主要研究方向为网络安全建设与运营 fangt@bjgas.com

Abstract: With the promotion and implementation of “Made in China 2025”, the deep integration of the two modernizations, cloud computing, big data, mobile computing, Internet of Things, artificial intelligence and other advanced technologies have been widely used, IT and OT are also integrated, production data and business data are gradually interconnected, and Industrial Internet scenario is gradual extended, “Smart Pipeline Network” and “Smart Gas” have been gradually realized, effectively improving the operational efficiency of Beijing Gas. But at the same time, Beijing Gas Group is also facing the deterioration of the cybersecurity environment, the increasing pressure of cybersecurity supervision, the increasing workload of security operation, and the difficulty of matching security resources. Therefore, Beijing Gas Group combs the construction ideas of Industrial Internet security operation center in an all-round way . On the premise of security governance, risk control and safety compliance, through the planning and construction of Industrial Internet security operation center, and based on large data analysis technology, various security protection, monitoring and response tools are integrated to form an Industrial Internet security operation platform. This platform covering the whole value chain of Beijing Gas Group from production operation to operation and management. It effectively supports the Cyber security management of Beijing Gas Group.

Key words: security operation, security governance, cyber security, large data security platform, Industrial Internet security, industrial Internet security operation platform

摘要: 随着“中国制造2025”的推进与实施,两化深度融合,云计算、大数据、移动计算、物联网、人工智能等先进技术得到广泛应用, IT和OT也在互相融合,生产业务和经营管理业务数据逐步互联互通,工业互联网场景逐步延展,“智慧管网”、“智慧燃气”逐步得到实现,有效提升北京燃气的业务运营效率.但与此同时北京燃气集团也面临网络安全环境不断恶化、网络安全监管压力增大、网络安全运营的工作量增大、网络安全资源难以与之匹配等问题,因此,北京燃气集团全面梳理工业互联网安全运营中心建设思路,以安全治理、风险管控、安全合规为前提,通过工业互联网安全运营中心的规划和建设,基于大数据分析技术整合各类安全防护、监测、响应类工具,形成了覆盖北京燃气集团从生产运营到经营管理全价值链的工业互联网安全运营平台,有效地支撑了北京燃气集团的网络安全治理.

关键词: 安全运营, 安全治理, 网络安全, 大数据安全平台, 工业互联网安全, 工业互联网安全运营平台