摘要
新一代信息通信技术与工业体系深度融合,工业互联网推动"人、机、物"的泛在深度互联和全面感知;工业互联网设备的网络化、数字化、智能化应用不断泛化,设备自身网络安全设计、应用过程管理与防护成为关注重点。本文从工业互联网设备的安全防护视角出发,明晰了工业互联网设备的内涵、防护范畴及需求,梳理了国内外工业互联网在安全监管和审查、安全检测认证等方面的发展现状;结合工业互联网设备的网络安全相关实践,剖析了我国工业互联网设备网络安全面临的问题。本文论证了我国工业互联网设备网络安全管理与防护的具体实施路径,并提出发展建议:从国家层面完善工业互联网设备的网络安全准入机制,建立设备网络安全检测认证体系,促进设备的网络安全架构研究和工程应用,强化设备的网络安全风险监测感知。
The new generation of information and communications technology is deeply integrated with the industrial system.The industrial Internet promotes the ubiquitous and deep interconnection and comprehensive perception of human,machines,and things.The industrial Internet equipment becomes increasingly networked,digital,and intelligent;therefore,the network security design,application management,and protection of these equipment become increasingly important.In this study,we clarify the connotation,protection scope,and requirements of the industrial Internet equipment,and summarize the development status of industrial Internet in China and abroad from the aspects of security control and security certification.Moreover,the problems regarding the network security of industrial Internet equipment in China are analyzed,and the specific implementation paths regarding the network security management and protection for the industrial internet equipment in China are discussed.Furthermore,several development suggestions are proposed.Specifically,the network security access mechanism of the industrial Internet equipment should be improved at the national level,a network security testing and certification system for the equipment should be established,research on the network security architecture and engineering application of the equipment should be promoted,and the network security risk monitoring and perception of the equipment should be strengthened.
作者
马娟
于广琛
柯皓仁
杨冬梅
吾守尔·斯拉木
Ma Juan;Yu Guangchen;Ke Haoren;Yang Dongmei;Wushour Silamu(Security Research Institute,China Academy of Information and Communications Technology,Beijing 100191,China;College of Information Science and Engineering,Xinjiang University,Urumqi 830046,China)
出处
《中国工程科学》
CSCD
北大核心
2021年第2期81-87,共7页
Strategic Study of CAE
基金
中国工程院咨询项目“新一代工业互联网安全技术发展战略研究”(2020-XZ-02)。
关键词
工业互联网设备
网络安全
管理
防护
认证
industrial Internet equipment
network security
management
protection
certification
