★ 关玲，杨继武 济南热电集团有限公司

★ 原颖平，魏磊 北京网御星云信息技术有限公司

摘要：近年来，全球工业控制系统网络安全态势日益复杂严峻，世界范围内针对工业控制系统的入侵、病毒、木马攻击等行为大幅增长。频发的恶性安全事故，对人员、设备、公共安全环境等造成严重危害。特别是震惊世界的伊朗核电站“震网”病毒事件，再次给全球工业界控制系统的信息安全问题敲响了警钟，加强工业控制系统的信息安全防护已经成为广泛共识，相关标准、技术、方案和设备日趋完善。本文通过对热源厂现场的实际网络安全调研和风险评估，总结出热源厂的整体安全风险，梳理出现场的安全需求，并结合国家相关行业标准以及政策法规，通过针对热源厂网络安全设计和主机安全设计加强了该厂的整体安全能力，对整个市政供热行业起到了示范效应，可在同行业进行复制推广。

关键词：关键基础设施；热源厂；工业互联网；网络安全

Abstract: In recent years, the global industrial control system network security situation has become increasingly complex and severe, and the intrusion, virus, Trojan horse attack and other behaviors against industrial control systems all over the world have increased significantly. Frequent malignant safety accidents cause serious harm to personnel, equipment and public safety environment. In particular, the "Earthquake Network" virus incident of Iran's nuclear power plant, which shocked the world, once again sounded an alarm for the information security of the global industrial control system. It has become a broad consensus to strengthen the information security protection of industrial control system, the relevant standards,technologies, schemes and equipment are becoming more and more perfect. Based on the actual network security investigation and risk assessment of the heat source plant site, this paper summarizes the overall security risks of the heat source plant and combs out the security needs of the site. Combined with relevant national industry standards, policies and regulations, this paper strengthens the overall security capacity of the plant through the network security design and host security design of the heat source plant, it has played a demonstration effect on the whole municipal heating industry and can be replicated and popularized in the same industry.

Key words: Critical infrastructure; Heat source plant; Industrial Internet; Network security

在线预览：浅析热源厂工业互联网安全防护系统设计.pdf

摘自《自动化博览》2022年1月刊暨《工业控制系统信息安全专刊（第八辑）》