油气管道SCADA系统安全浅析

摘要

介绍了石油天然气管道SCADA系统的组织结构,分析了系统结构及管理中存在的安全隐患,结合工程实际情况,从硬件及网络架构、软件、管理层三个角度提出了提高SCADA系统安全性的措施,即:站控系统严控跨域访问,控制中心实行纵向分层防护,横向部署安全平台,实现所有安全日志可追溯.SCADA系统内所有工作站安装工业防火墙安全卫士,定期更新病毒库和扫描安全隐患并修复;加强对系统操作人员的培训,制订相关操作规程,从管理层面上降低系统安全风险.%The frame of oil/gas pipeline SCADA system is expounded.The security risks existing in the system structure and management are analyzed.Combining with actual situation,the countermeasures of improving the security of SCADA system is put forward from aspects of hardware and network structure,software and management.Such as restricting cross-domain access among the station control systems,designing a vertical hierarchical protection in the control center,deploying horizontal security platform to achieve tracing function of all security log.All workstations should be protected by installing industrial firewall security guards.Virus gene is updated and security risks are scanned and repaired regularly.Training for system operators should be stressed,relevant operational procedures should be formulated.System security risks would be reduced from management.