Abstract: To ensure the information security of industrial control system in iron and steel enterprises, it is necessary to know what important business, important data, impacts and hazards will be brought by system interruption in iron and steel enterprises, and how to protect and why to do so. The first problem is to understand the business situation of iron and steel enterprises, because the current information security work is ultimately to serve the business of enterprises. Only when we know what important business we should focus on, can we find important information assets in business processes and take appropriate measures to protect them. With the construction of automation and infor matization in iron and steel enterprises, higher requirements are put forward for the security protection of industrial control system. This paper evaluates the security of the industrial control system of the whole process cold rolling production line. According to the evaluation results, the design concept of security protection is put forward, and the practical work is carried out. Results have been achieved based on MES and SCADA related technical research of industrial control security in industry.

Key words: cold rolling line, industrial control system, industrial control network, safety protection, industrial control system security

摘要： 要做好钢铁企业的工控系统信息安全,就要知道钢铁企业有哪些重要的业务、重要数据、系统中断会带来哪些影响、危害，应当怎么保护和为什么这样保护.而首当其冲的问题是了解钢铁企业的业务情况,因为目前的信息安全工作说到底是服务于企业的业务,只有知道要重点保护哪些重要业务,才能在业务流程中发现重要信息资产并采取相应的措施加以保护.随着钢铁企业自动化、信息化的建设，对工控系统的安全防护也提出了更高的要求.针对全流程冷轧产线的工控系统安全进行了评估，根据评估结果，提出了安全防护的设计方案，并开展了实践工作，对基于MES和SCADA的工业控制安全技术进行了研究，取得了不错的效果.

关键词: 冷轧产线, 工业控制系统, 工业控制网络, 安全防护, 工业控制系统安全