Security risks and models of energy industry's cyberspace

doi:10.3969/j.issn.1674-1951.2021.02.007

Abstract

Abstract:

The increasing demand for an open,interconnective and standardized technical system of energy industry exerts sustained pressure on the traditional physical isolated control system.From the perspective of key infrastructure and critical information infrastructure,the importance of control system security in energy industry and the difference of security protection levels in different energy industrial systems were analyzed.At the same time,security risks on the fusion of operation technology（OT） and information communication technology（ICT） in energy industry cyberspace based on the information physical systems were studied ,and the security characteristics of the deep integrations of energy flow,business flow and information flow were described.Finally,a security management model for energy industry cyberspace was proposed to realize its intelligent perception,active defense,predictive maintenance,and improvement of the protection capacity.

Key words: energy industry cyberspace, industrial control system, critical information infrastructure, security protection level, classified protection 2.0

CLC Number:

TM711：TN98

GONG Yue, LI Qiuxiang, ZHANG Xinyu, GONG Gangjun, JIN Lu. Security risks and models of energy industry's cyberspace[J]. Huadian Technology, 2021, 43(2): 40-45.

Figures/Tables 2

References 18

[1]	徐锭明. 我国能源工业现状和能源政策[J]. 中国电力, 2004,37(9):1-4.
	XU Dingming. Present situation and policy of energy industry in China[J]. Electric Power, 2004,37(9):1-4.
[2]	陈琳琳, 杨宇, 洪辉, 等. 中国能源工业空间分布、基地识别与演变特征[J]. 资源科学, 2016,38(12):2256-2268.
	CHEN Linlin, YANG Yu, HONG Hui, et al. Spatial distribution,base identification and evolution characteristics of China's energy industry[J]. Resources Science, 2016,38(12):2256-2268.
[3]	天工. 中国能源供给革命迫切需要加快发展气体清洁能源[J]. 天然气工业, 2015,35(8):9.
	TIAN Gong. China's energy supply revolution urgently needs to accelerate the development of clean gas energy[J]. Natural Gas Industry, 2015,35(8):9.
[4]	彭勇, 江常青, 谢丰, 等. 工业控制系统信息安全研究进展[J]. 清华大学学报(自然科学版), 2012,52(10):1396-1408.
	PENG Yong, JIANG Changqing, XIE Feng, et al. Industrial control system cyber security research[J]. Journal of Tsinghua University(Natural Science Edition), 2012,52(10):1396-1408.
[5]	王珂. 基于等级保护2.0新标准的工业控制系统安全现状分析[J]. 网络安全技术与应用, 2020(10):134-136.
	WANG Ke. Analysis of the current situation of industrial control system security based on the new level protection 2.0 standard[J]. Network Security Technology & Application, 2020(10):134-136.
[6]	吴欢. 工业控制环境计算节点安全防护技术研究[D]. 北京:北京工业大学, 2016.
[7]	王小山, 杨安, 石志强, 等. 工业控制系统信息安全新趋势[J]. 信息网络安全, 2015(1):6-11.
	WANG Xiaoshan, YANG An, SHI Zhiqiang, et al. The new trend of industrial control system information security[J]. Netinfo Security, 2015(1):6-11.
[8]	郑少波, 徐伟, 石彬. 工业控制系统安全现状[J]. 网络安全技术与应用, 2020(5):111-113.
	ZHENG Shaobo, XU Wei, SHI Bin. Security status of industrial control systems[J]. Network Security Technology & Application, 2020(5):111-113.
[9]	杨晟, 孙跃, 龚钢军, 等. 基于能源区块链的综合能源服务研究[J]. 华电技术, 2020,42(8):11-16.
	YANG Sheng, SUN Yue, GONG Gangjun, et al. Research on integrated energy services based on energy blockchain[J]. Huadian Technology, 2020,42(8):11-16.
[10]	武志军. 综合能源服务下新能源集约化管控评价方法[J]. 华电技术, 2019,41(12):68-71.
	WU Zhijun. Evaluation method on new energy intensive management for integrated energy services[J]. Huadian Technology, 2019,41(12):68-71.
[11]	韩峰, 张衍国, 严矫平, 等. 综合能源服务业务和合作模式[J]. 华电技术, 2019,41(11):1-4.
	HAN Feng, ZHANG Yanguo, YAN Jiaoping, et al. Integrated energy service and cooperation modes[J]. Huadian Technology, 2019,41(11):1-4.
[12]	张帅. 工业控制系统安全风险分析[J]. 信息安全与通信保密, 2012(3):15-19.
	ZHANG Shuai. Security risk analysis of industrial control system[J]. Information Security and Communications Privacy, 2012(3):15-19.
[13]	陈星, 贾卓生. 工业控制网络的信息安全威胁与脆弱性分析与研究[J]. 计算机科学, 2012,39(S2):188-190.
	CHEN Xing, JIA Zhuosheng. Analysis and research on information security threats and vulnerabilities of industrial control networks[J]. Computer Science, 2012,39(S2):188-190. doi: 10.1063/1.31092
[14]	欧阳劲松, 丁露. IEC 62443工控网络与系统信息安全标准综述[J]. 信息技术与标准化, 2012(3):24-27.
	OUYANG Jinsong, DING Lu. Overview of IEC 62443 industrial control network and system information security standards[J]. Information Technology & Standardization, 2012(3):24-27.
[15]	兰昆, 饶志宏, 唐林, 等. 工业SCADA系统网络的安全服务框架研究[J]. 信息安全与通信保密, 2010(3):47-49.
	LAN Kun, RAO Zhihong, TANG Lin, et al. Research on the security service framework of industrial SCADA system network[J]. Information Security and Communications Privacy, 2010(3):47-49.
[16]	李佳玮, 郝悍勇, 李宁辉. 工业控制系统信息安全防护[J]. 中国电力, 2015,48(10):139-143.
	LI Jiawei, HAO Hanyong, LI Ninghui. Information security protection of industrial control systems[J]. China Electric Power, 2015,48(10):139-143.
[17]	魏钦志. 工业控制系统安全现状及安全策略分析[J]. 网络空间安全, 2013,4(2):23-26.
	WEI Qinzhi. Security status and security strategy analysis of industrial control systems[J]. Cyberspace Security, 2013,4(2):23-26.
[18]	卿斯汉. 关键基础设施安全防护[J]. 信息网络安全, 2015(2):1-6.
	QING Sihan. Critical infrastructure security protection[J]. Netinfo Security, 2015(2):1-6.