1771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC3191771-NB4T IC693ACC319
工業(yè)工控系統(tǒng)在互聯(lián)網(wǎng)時(shí)代不斷遭遇信息安全的挑戰(zhàn),數(shù)據(jù)安全面臨*考驗(yàn)。
工業(yè)控制系統(tǒng)安全不是“老系統(tǒng)碰上新問題”,而是傳統(tǒng)信息安全問題在工業(yè)控制領(lǐng)域的延伸。當(dāng)前信息技術(shù)已廣泛應(yīng)用于石油、化工、電力等眾多領(lǐng)域,為傳統(tǒng)工業(yè)控制系統(tǒng)優(yōu)化升級提供了重要的支撐,同時(shí)也帶來了網(wǎng)絡(luò)環(huán)境下的信息安全問題,蠕蟲、木馬、黑客攻擊等網(wǎng)絡(luò)威脅對工業(yè)控制系統(tǒng)的沖擊呈現(xiàn)出愈演愈烈的發(fā)展態(tài)勢。比如2010年10月發(fā)生在伊朗核電站的"震網(wǎng)"(Stuxnet)病毒,為工業(yè)生產(chǎn)控制系統(tǒng)安全敲響了警鐘?,F(xiàn)在,國內(nèi)外生產(chǎn)企業(yè)都把工業(yè)控制系統(tǒng)安全防護(hù)建設(shè)提上了日程。
近年來,隨著經(jīng)濟(jì)化的深入推進(jìn),競爭越來越激烈,工業(yè)控制系統(tǒng)作為能源、制造、等國家命脈行業(yè)的重要基礎(chǔ)設(shè)施,在信息戰(zhàn)的陰影下面臨著安全風(fēng)險(xiǎn)持續(xù)攀升的運(yùn)行環(huán)境。據(jù)統(tǒng)計(jì),過去一年,國家信息安全漏洞共享平臺收錄了100余個(gè)對我國影響廣泛的工業(yè)控制系統(tǒng)軟件安全漏洞,較2010年大幅增長近10倍,涉及西門子、北京亞控和北京三維力控等國內(nèi)外工業(yè)控制系統(tǒng)制造商的產(chǎn)品。安全漏洞的涌現(xiàn),無疑為工業(yè)控制系統(tǒng)增加了風(fēng)險(xiǎn),進(jìn)而影響正常的生產(chǎn)秩序,甚至?xí)<叭藛T健康和公共財(cái)產(chǎn)安全。
兩化融合和物聯(lián)網(wǎng)的發(fā)展使得TCP/IP協(xié)議和OPC協(xié)議等通用協(xié)議越來越廣泛地應(yīng)用在工業(yè)控制網(wǎng)絡(luò)中,隨之而來的通信協(xié)議漏洞問題也日益突出。例如,OPCClassic協(xié)議(OPCDA,OPCHAD和OPCA&E)基于微軟的DCOM協(xié)議,DCOM協(xié)議是在網(wǎng)絡(luò)安全問題被廣泛認(rèn)識之前設(shè)計(jì)的,極易受到攻擊,并且OPC通訊采用不固定的端口號,導(dǎo)致目前幾乎無法使用傳統(tǒng)的IT防火墻來確保其安全性。因此確保使用OPC通訊協(xié)議的工業(yè)控制系統(tǒng)的安全性和可靠性給工程師帶來了*的挑戰(zhàn)。
提到工控安全問題,很多人可能會簡單地理解為直接用于控制的實(shí)時(shí)操作系統(tǒng)設(shè)備的安全。然而,從整個(gè)架構(gòu)上看,工業(yè)控制系統(tǒng)是由服務(wù)器、終端、前端的實(shí)時(shí)操作系統(tǒng)等共同構(gòu)成的網(wǎng)絡(luò)體系,同樣涉及物理層、網(wǎng)絡(luò)層、主機(jī)層、應(yīng)用層等傳統(tǒng)信息安全問題。在整個(gè)工業(yè)控制系統(tǒng)中,大多數(shù)工控軟件都是運(yùn)行在通用操作系統(tǒng)上,例如操作員站一般都是采用Linux或Windows平臺,由于考慮到系統(tǒng)運(yùn)行的穩(wěn)定性,一般系統(tǒng)運(yùn)行后不會對Linux或Windows平臺打補(bǔ)丁;另外,大多工業(yè)控制網(wǎng)絡(luò)都屬于內(nèi)部網(wǎng)絡(luò),不與互聯(lián)網(wǎng)相連,即使安裝反病毒軟件,也不能及時(shí)地更新病毒數(shù)據(jù)庫,并且殺毒軟件對未知病毒和惡意代碼也無能為力。操作系統(tǒng)漏洞無法避免,加之傳統(tǒng)防御技術(shù)和方式的滯后性,給病毒、惡意代碼的傳染與擴(kuò)散留下了空間。以2010年震驚工業(yè)界的“震網(wǎng)”為例,該病毒利用Windows操作系統(tǒng)的漏洞侵入系統(tǒng),之后加載攻擊模塊,查找Windows平臺上運(yùn)行的工業(yè)控制系統(tǒng),進(jìn)而對系統(tǒng)發(fā)動(dòng)直接的攻擊行為。
據(jù)了解,在2010年爆發(fā)的“震網(wǎng)”事件中,病毒導(dǎo)致部分用于鈾濃縮的離心機(jī)無法運(yùn)行,直擊伊朗核工業(yè)。由此可見,針對工業(yè)控制系統(tǒng)的攻擊行為,已經(jīng)對國家經(jīng)濟(jì)和社會發(fā)展產(chǎn)生深遠(yuǎn)的影響。事實(shí)上,不僅僅是“震網(wǎng)(Stuxnet)”病毒,近年來相繼涌現(xiàn)出的惡意軟件如“毒區(qū)(Duqu)”、“火焰(Flame)”等等,也將攻擊重心向石油、電力等國家命脈行業(yè)領(lǐng)域傾斜,工業(yè)控制系統(tǒng)面臨的安全形勢越來越嚴(yán)峻。為了提升工業(yè)控制系統(tǒng)安全水平,相關(guān)機(jī)構(gòu)制定了《工業(yè)過程測量、控制和自動(dòng)化網(wǎng)絡(luò)與系統(tǒng)信息安全》(IEC62443)系列標(biāo)準(zhǔn),為系統(tǒng)集成商、產(chǎn)品提供商等開展安全性評估工作提供指導(dǎo)。其中,在信息安全方面,IEC62443指出,“基于計(jì)算機(jī)系統(tǒng)的能力,能夠保證非*人員和系統(tǒng)既無法修改軟件及其數(shù)據(jù)也無法訪問系統(tǒng)功能,卻保證*人員和系統(tǒng)不被阻止。”
業(yè)內(nèi)人士指出,在工業(yè)控制網(wǎng)絡(luò)體系中,作為主機(jī)的服務(wù)器是非常關(guān)鍵的設(shè)備,服務(wù)器上運(yùn)行的操作系統(tǒng)平臺承載著核心業(yè)務(wù)系統(tǒng),對前端實(shí)時(shí)操作系統(tǒng)正常運(yùn)行具有重要影響,在工控安全的整個(gè)架構(gòu)里面,服務(wù)器操作系統(tǒng)平臺的安全是*的一部分。
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X012 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BA2, VE3051CO, 12P1562X032 Power Controller 2 Wide Carrier
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X032 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X032 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X032 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X052 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X052 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X052 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-BE1, VE4050S2K1C1, 12P0818X052 8 Wide I/O Carrier with Shield Bar
DELTAV KJ4001X1-CA1, 12P0623X022 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X062 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X062 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X062 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X062 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0823X052 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0823X052 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0823X052 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0823X052 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X052 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CB1, 12P0625X062 Fused I/O Terminal Block
DELTAV KJ4001X1-CC1, 12P0733X032 4 Wire TX Terminal Block
DELTAV KJ4001X1-CC1, 12P0733X032 4 Wire TX Terminal Block
DELTAV KJ4001X1-CH1, 12P1811X012 RTD Terminal Block
DELTAV KJ4001X1-CH1, 12P1811X012 RTD Terminal Block
DELTAV KJ4001X1-CH1, 12P1811X012 RTD Terminal Block
DELTAV KJ4001X1-HA1, 12P0949X022 Local Bus Extender Cable
DELTAV KJ4002X1-BB1, 12P1728X042, VE4055S2C0 Right 8 Wide Vertical Carrier
DELTAV KJ4002X1-BB1, 12P1728X042, VE4055S2C0 Right 8 Wide Vertical Carrier
DELTAV KJ4002X1-BA1, 12P1727X042, VE4055S1C0 Left 8 Wide Vertical Carrier
DELTAV KJ4010X1-BF1, 12P0831X042 Local Bus Left Extension
DELTAV KJ4010X1-BG1, 12P0830X042 Local Bus Right Extension
DELTAV KJ4010X1-BG1, 12P0830X072 LOCAL BUS RIGHT EXTENDER
DELTAV KJ4010X1-BF1, 12P0831X062 LOCAL BUS LEFT EXTENDER
DELTAV KJ4010X1-BE1, 12P0631X012 CABLE
DELTAV 12P0631X012 DELTAV PARALLEL CORD
DELTAV KJ4001X1-HA1, 12P0949X022 LOCAL BUS EXTENDER CABLE
DELTAV KJ4002X1-BF2, 12P3866X012 DELTAV BOTTOM EXTENDER CABLE
DELTAV KJ4002X1-BF2, 12P3866X012 DELTAV BOTTOM EXTENDER CABLE
DELTAV KJ4002X1-BF2, 12P3866X012 DELTAV BOTTOM EXTENDER CABLE
DELTAV KJ4002X1-BF2, 12P3866X012 DELTAV BOTTOM EXTENDER CABLE
DELTAV KJ4002X1-BE1, 12P4048X012 DELTAV TOP EXTENDER CABLE
DELTAV KJ4002X1-BE1, 12P4048X012 DELTAV TOP EXTENDER CABLE
DELTAV KJ4002X1-BE1, 12P4048X012 DELTAV TOP EXTENDER CABLE
DELTAV KJ4001X1-GB1, 12P0831X022 LOCAL BUS LEFT EXTENDER
DELTAV KJ4001X1-GB1, 12P0831X022 LOCAL BUS LEFT EXTENDER
DELTAV KJ4001X1-GA1, 12P0830X022 LOCAL BUS RIGHT EXTENDER
DELTAV KJ4001X1-GA1, 12P0830X022 LOCAL BUS RIGHT EXTENDER
DELTAV KJ4001X1-CA1, 12P0623X042 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X042 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X022 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X022 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X022 I/O TERMINAL BLOCK
DELTAV KJ4001X1-CA1, 12P0623X022 I/O TERMINAL BLOCK