In the past year, industrial control systems and industrial Internet have accumulated to a certain extent at the security level. Whether it is the safety of the industrial control system itself or the safety of the industrial Internet, it should be fully and seriously, and at the same time, according to the height of the top-level design, it can be effectively implemented and developed.
Industrial control system information security (hereinafter referred to as industrial security) is an important guarantee for implementing the strategy of manufacturing a strong country and a network power. In recent years, with the comprehensive advancement of China's manufacturing and the accelerated development of industrial digitalization, networking, and intelligence, China's industrial control security faces new challenges such as increasing security loopholes, accelerated penetration of security threats, and complex and diverse attack methods.
If we can introduce new technologies represented by big data, artificial intelligence, etc. into the information security work of industrial control systems, and use new technologies to solve the practical problems encountered in the process of information security development of industrial control systems in China, it can not only promote new The practical application of technology can also greatly enhance the information security of industrial control systems. Provide advice or suggestions for guiding the establishment of relevant standards and supervision mechanisms for information security of industrial control systems. Improve the overall safety awareness in the industrial control field, and raise the safety of industrial control system information to the highest level.
Observing the work deployed by China in the field of industrial control systems in recent years, we can see that 2018 will be a crucial year for the implementation of industrial safety work.
Clear macro guidanceIn order to speed up the construction of China's industrial control system information security system, improve the information security protection capability of industrial enterprises' industrial control systems, and promote the development of industrial information security industry, at the end of 2017, the Ministry of Industry and Information Technology formulated and issued the "Industrial Control System Information Security Action". Plan (2018-2020) (hereinafter referred to as the "Plan").
Recently, the head of the Information and Software Services Department of the Ministry of Industry and Information Technology has interpreted the contents of the Plan. It is understood that the "Plan" clearly will fully implement the spirit of the 19th Party Congress, take Xi Jinping's new era of socialism with Chinese characteristics as the guide, adhere to the overall national security concept, and implement the main responsibility of enterprises as the key, closely surrounding the new era. We will deepen the development of demand, focus on improving the safety situational awareness, safety protection and emergency response capabilities of industrial control, promote industrial innovation and development, establish a multi-level joint defense and prevention work mechanism, and lay a solid foundation for the strategic construction of a strong country and a network power. Ensure information security and informatization construction to be synchronized, synchronized, and synchronized. Adhere to the implementation of corporate responsibility. Adhere to the guidance of local conditions. Adhere to both technology and management.
The main goal is to basically establish a system-wide safety management system for the whole system in 2020, and the awareness of industrial safety in the whole society has been significantly enhanced. The nationwide online monitoring network, emergency resource library, simulation test, information sharing and information notification platform (one network, one library and three platforms) were built, and the situational awareness, security protection and emergency response capabilities were significantly improved. Cultivate a group of leading enterprises with great influence and strong competitiveness, and create 3 to 5 national new industrialized industrial demonstration bases (industrial information security), and the ability of industrial innovation and development will be greatly improved.
According to the interpretation of the Information Technology and Software Service Department of the Ministry of Industry and Information Technology, the formulation of the Plan has set a timetable and roadmap for the work safety assurance work, further clarifying what the departments, localities and enterprises are doing and how to do it, and implementing the industrial control for the next step. Safety work provides the basis and guidance.
For the “one network, one library and three platformsâ€, the above-mentioned person in charge explained: “One network†refers to the national industrial security online monitoring network. It will support the National Industrial Information Security Development Research Center and take the lead in coordinating local and industrial technical institutions to build a multi-level monitoring network centered on the national industrial security online monitoring platform, vertically connecting provincial sub-centers and horizontally covering key industrial sectors. The real-time perception, accurate judgment and scientific decision-making of the operational status and risk hazards of important industrial control systems nationwide.
“One library†refers to the industrial security emergency resource library. In accordance with the overall requirements of the National Cyber ​​Security Incident Emergency Plan, support the National Industrial Information Security Development Research Center to build an emergency resource pool, gather information on vulnerabilities, risks, solutions, and plans, and implement functions such as assisted decision-making and plan drills. In the event of a sudden industrial information security incident, the supporting industry authorities coordinate technical experts and professional teams to conduct analysis and judgment on the incident, and mobilize relevant emergency resources to carry out the disposal work in a timely and effective manner.
“Three Platforms†refers to the industrial control security simulation test platform, information sharing platform and information notification platform. The industrial control safety simulation test platform is based on real industrial control scenarios such as chemical production, pipeline transportation, sewage treatment, and intelligent manufacturing. It simulates business processes, restores the real site, and meets diverse needs such as training, testing, verification, and testing. Make full use of cloud computing, big data and other technical means to build a national industrial security information sharing platform, establish a shared list, clearly share content, and promote the formation of government guidance, corporate entities, social participation, and benefit sharing mechanisms. Support the construction of an industrial control safety information notification and early warning platform, timely release risk warning information, track the progress of risk prevention work, and form a fast, efficient, and all-in-one information notification and early warning system.
“Industrial safety is an important part of industrial production safety. Industrial enterprises as industrial control system operators should bear the main responsibility.†The above-mentioned person in charge said that enterprises should establish a work safety responsibility system and clarify the first responsibility of corporate legal representative and business owner. Responsibility. The personnel of relevant departments such as informationization, production management, operation and maintenance, and equipment management shall be selected to establish an enterprise industrial safety management organization. At the same time, we will continue to increase investment in industrial control safety and implement special funds for protection technology transformation and hidden danger management.
At the same time, in the safeguard measures of the "Plan", it is also mentioned that policy support should be strengthened: adhere to the combination of government guidance and market operation, and fully mobilize social forces to support the construction of the industrial safety and security system. Support qualified localities to set up special projects, and increase support for industrial safety infrastructure construction, key technology verification test platform construction, and industrial innovation development. Use national policy credit funds to support the construction of industrial information security industry demonstration bases.
Accelerate the training of talents: Encourage industrial enterprises to strengthen cooperation with institutions and jointly train industrial safety professionals. To build a national high-tech think tank for industrial safety control, provide intellectual support and technical support for industrial security strategy deployment, planning and formulation, decision-making consultation, major issues, and train a team of well-equipped and skilled industrial safety professionals.
Encourage social participation: give full play to the active role of intermediary organizations such as industry associations and industry alliances, support the development of technology research and development, skill competition, standard promotion, public services, international cooperation, etc., promote technical exchanges, strengthen information communication, and form political, economic, research and research. The development pattern of efficient linkage.
Multi-dimensional elevation of securityWith the continuous penetration and spread of the Internet and the new generation of information technology, the industrial control system that dominates the "controlling the brain" status of the industrial Internet is inevitably moving toward the "Internet +" direction. The relatively closed use environment of industrial control systems has been gradually broken, and the openness and interconnectivity have become stronger, making the cooperation between industrial control systems and various business systems possible. The connection between industrial equipment, people, information systems and data is more The closer the system is, the integration of systems, equipment intelligence, business synergy, information sharing, decision-making requirements panorama, and all process networkization have become the development trend of industrial control systems. According to the data, hundreds of millions of industrial control systems have been connected to the Internet. Therefore, the improvement of industrial Internet security awareness will also become an important factor in the safety of industrial control.
In the field of industrial Internet, there are also many security issues. For example: increased attack paths under network; security vulnerabilities brought by traditional IT products; new technologies are not perfect in defense systems in industrial control fields.
Faced with these problems, on November 27, 2017, after the approval of Premier Li Keqiang, the State Council issued the "Guiding Opinions on Deepening the "Internet + Advanced Manufacturing Industry" to Develop the Industrial Internet" (hereinafter referred to as "Opinions"). The basic consideration of the "Opinions" is that, with the spirit of the 19th National Congress of the Communist Party as the guide, comprehensively drop the internship in the new era of socialism with Chinese characteristics in the new era, with the supply-side structural reform as the main line, with the goal of comprehensively supporting the construction of a strong country and a network powerhouse. Focusing on promoting the deep integration of the Internet and the real economy, we will build three functional systems of network, platform and security to promote the construction of a modern economic system.
Among them, the Ministry of Industry and Information Technology interprets the contents of the "Opinions" concerning the security field: "Guiding Opinions" aims to build an industrial Internet security system, focusing on improving the security protection capabilities of industrial Internet and establishing a data security protection system. And promote the construction of safety technology means and other specific tasks, and comprehensively strengthen the industrial Internet security support capabilities.
Improve industrial Internet security protection capabilities. The Guiding Opinions combines technology and management to create an industrial Internet security system that covers equipment, controls, networks, platforms and data. At the technical level, we will increase support for technology research and development and results transformation, and focus on breaking through the core technologies of identity analysis system security, industrial Internet platform security, industrial control system security, industrial big data security, etc., and promote attack protection and vulnerability exploitation for industrial Internet. Research and development of security products such as intrusion detection, situational awareness, security auditing, and trusted chips. At the management level, through the construction of the industrial Internet security assessment and certification system, relying on third-party agencies such as industry alliances to carry out security capability assessment and certification, and promote the promotion and application of industrial Internet security products and services, the industrial Internet enterprise security protection capabilities continue to improve.
Establish a data security protection system. The industrial Internet carries a large amount of industrial data with great value, which can reveal the industrial production situation and operation law. It also carries a large number of information such as market, customer and supply chain. It is the core element of industrial Internet, and data security has become an important factor in industrial Internet security. One of the tasks. On the one hand, promote the establishment of the industrial Internet data security management system for the entire industry chain, clarify the data security protection responsibilities and specific requirements of relevant entities, strengthen the security protection capabilities of all aspects of the data life cycle, and avoid user privacy or important industrial data being illegally stolen or On the other hand, the establishment of industrial data classification and classification management system, the formation of industrial Internet data flow management mechanism, clear data retention, data leakage notification requirements; Finally, strengthen the supervision and inspection of the implementation of industrial Internet enterprises data security protection responsibilities.
Promote the construction of safety technology. The construction of technical means is an important way to improve the security of industrial Internet. The "Guiding Opinions" put forward the task of building safety technology means from three levels: enterprise, industry and country. At the enterprise level, relevant enterprises are required to implement the main responsibility of network security, increase security investment, strengthen their own security protection capabilities through strengthening technical means, and carry out pilot demonstrations of industrial Internet security. At the industry level, support relevant industry alliances to actively play a guiding role and integrate industry resources. Innovate and secure service mode to enhance the overall security and service capabilities of the industry; at the national level, give full play to the role of national professional institutions and social forces, strengthen national industrial Internet security technology support capabilities, and focus on improving hidden danger investigation, attack detection, emergency response and attack Traceability.
It can be seen that these are about to be implemented in the security construction of the industrial Internet level, and there is no shortage of content closely related to the industrial control system. In the past year, industrial control systems and industrial Internet have accumulated to a certain extent at the security level. China's investment in industrialization information and expectations are obvious to all. Whether it is the safety of the industrial control system itself or the safety of the industrial Internet, it should be fully and seriously, and at the same time, according to the height of the top-level design, it can be effectively implemented and developed. In 2018, the safety work of industrial control systems and related fields will be greatly promoted.
Self Test Gfci With Tr Outlet,20 Amp Gfci Plug,20 Amp Gfci Receptacle,Double Gfci Outlet
Lishui Trimone Electrical Technology Co., Ltd , https://www.3gracegfci.com