关键词: 工业控制系统, 可编程逻辑控制器（PLC）, 综合防控体系, 信息安全防护

Abstract:

With the integrating of informatization and industrialization,industrial communication and automatic control technologies have become more networked,standardized and open.Meanwhile,the security vulnerabilities in communication protocol and security strategy are exposed for the lack of information security functions in Programmable Logic Controller（PLC） itself.And this traditional threat to information security has developed into the field of industrial control（IC）.Massive PLCs are widely used in electric power enterprises,especially in their core part.Once the medium or high risk vulnerabilities be attacked,PLC will malfunction,leading to data tampering,information leakage and even PLC breakdown and DoS.To solve the prominent hidden danger in information security of PLC,a multidimensional comprehensive protection and control system for industrial PLC in electric industry is proposed.The system can execute protection from three aspects,network boundary division of auxiliary network control systems,self security protection and comprehensive management.This design have been deployed in an electric power enterprise and achieved satisfied results.It could improve the security protection for plant-level PLC systems to a new level.

Key words: industrial control system, Programmable Logic Controller（PLC）, integrated protection and control system, information security protection