ICSsecurity_ISPAB-工业控制系统网络安全.pdf

Industrial Control Systems Security Protecting the Critical Infrastructure Seán Paul McGurk Director, Control Systems Security National Cyber Security Division U.S. Department of Homeland Security Overview Control Systems Overview Threat and Risk Consequences Mitigation Control Systems Security Program Overview of Control Systems Why are Control Systems unique? Control systems provide the means to sense a physical process and implement changes to that process to provide a product or desired result Modern control systems utilize communication and network components and architecture and are increasingly interconnected to business networks Control systems have much different life cycles, measured in decades with many communication protocols. Maintenance is also managed differently. Uptime and reliability are priority. Control systems have many and diverse “actors” involved including operators, vendors, integrators, and contractors over the life cycle. 4 What are Industrial Control Systems? Computer based systems (Digital to Analog) Connected to integrated systems Can control critical systems Usually remote operations Example systems Railway and transit Chemical processing Water treatment Power generation Hazardous Materials storage/filtering 5 Definition of a Industrial Control System The term Industrial Industrial Control System (ICS) refers to a broad set of control systems, which include: SCADA (Supervisory Control and Data Acquisition) DCS (Distributed Control System) PCS (Process Control System) EMS (Energy Management System) AS (Automation System) SIS (Safety Instrumented System) And a number of other