石化企业工业控制系统非网联接

摘要

石化企业工业控制系统在与接入因特网的其他信息系统联网时有可能受到来自外部网络的攻击。为了实现石化企业工业控制系统与其他网络之间安全的数据交换，本文提出一种利用非网结构进行单向传输的设计方案；论述单向数据传输的原理和采用的安全策略，并对非网联接进行安全性测试。测试结果显示，该非网联接方案能够有效地防止来自外部网络的黑客、木马、病毒等对工业控制系统的攻击，保护石化企业工业控制系统安全运行。%When industrial control systems ( ICS) in petrochemical enterprise access other information systems connected to Inter-net, they may suffer cyber attacks from external networks .In order to achieve secure data exchange between ICS of petrochemical enterprise and its corporate networks , a non-network formula which employed unilateral data transmission method is discussed in this paper.It discusses the principles of unilateral data transmission method and many security policies employed .In addition, the paper offers tests to prove that non-network formula can protect ICS in petrochemical enterprise from being tampered or at -tacked by hackers , Trojans or virus from Internet , and the design could ensure the safe running of ICS in petrochemical enterpri-ses.