The "Internet" action plan aims to promote the transformation of the manufacturing model, the organizational innovation of the industry and the upgrading of the industrial structure. While the traditional industry has achieved tremendous improvement after the integration and penetration of information technology, the network security of industrial control systems has become a hot issue in the industry.
On October 17, the Ministry of Industry and Information Technology issued the "Notice" stating that in order to implement the "Guiding Opinions of the State Council on Deepening the Integration of Manufacturing and Internet Development" (Guo Fa [2016] No. 28), the industrial control system information of industrial enterprises is guaranteed. Safety, the development of "Industrial Control System Information Security Protection Guide" (referred to as "Guide"), issued to the local industry and information technology authorities. The local industry and informatization authorities shall, in accordance with the overall arrangement of the Ministry of Industry and Information Technology, guide industrial enterprises within their respective administrative regions to formulate industrial safety protection implementation plans, and promote enterprises to meet the relevant requirements of these guidelines in stages and in batches.
Cracking the industrial safety protection problem, the Ministry of Industry and Information Technology proposed the industry standard guidance
On November 3, the Ministry of Industry and Information Technology officially published the full text of the Guide on the website. As the first important landmark document in the field of industrial safety, the Guide provides industry-specific guidance on the safety of system boundaries such as industrial control systems, from security software, patch management, border security, physical environment security, and identity authentication. Industrial control system application enterprises and enterprises and institutions engaged in the planning, design, construction, operation and maintenance, and evaluation of industrial control systems provide normative guidance.
In the context of network interconnection, the interconnection of industrial control systems has become an inevitable trend. On the one hand, interconnection can increase productivity, enhance innovation, reduce industrial energy and resource consumption, and help transform and upgrade industrial models. On the other hand, it will also induce a series of network security problems due to interconnection. Industrial control systems have always faced internal and external Various malicious virus attacks. As a result, cyber attacks currently experienced by industrial control systems have risen to one of national security challenges.
At present, the industrial control system is generalized, networked, and intelligent, and the information security protection situation is becoming increasingly severe: from the 2010-2016 foreign hot-spot industrial control incident, once the system information security loopholes, the industrial production operation and the state will be Economic security poses major hidden dangers, such as the Iranian “seismic net†incident in 2010, when the Ukrainian electricity was attacked by BlackEnergy malware in 2015.
In China, the Institute of Electronic Science and Technology Information of the Ministry of Industry and Information Technology has been continuously tracking and monitoring the network security risks of industrial control systems since 2012. It has also discovered a large number of loopholes in network security risks of industrial control systems and notified the competent authorities. Multiple critical infrastructure high-risk cybersecurity risks in multiple regions, including energy, municipal water supply, gas supply and heating.
The data shows that hackers use 87% of the vulnerabilities. From the perspective of the type of vulnerability, the number of vulnerabilities in authentication is the largest. As long as the network attacker has a preliminary level, some administrator rights to access industrial control system devices and systems can be obtained through the Internet, and the potential threat of these vulnerabilities is constantly increasing. Big.
In this regard, the industry generally believes that the introduction of the "Guide" is an extension and refinement of the original programmatic documents, with strong operationality, will promote the relevant system application enterprises and implementers, and increase the safety of industrial control systems. Protection of resources, product development, security protection services development.
Cable Terminal Connectors,90 Degree Spade Terminal Connector,Insulated Spade Terminal,2 Pin Terminal Connector
Wonke Electric CO.,Ltd. , https://www.wkdq-electric.com