Safety problems and solutions for industrial control systems

With the continuous integration of industrialization and informatization, more and more information technology has been applied to the industrial field. At present, more than 80% of the critical infrastructure involved in the national economy and the people's livelihood rely on industrial control systems to achieve automation. Industrial control systems have become an important part of the country's critical infrastructure, and the safety of industrial control systems is related to the country's strategic security.

Industrial control system safety features

The field of industrial control systems is very different from the traditional field of information security. The industrial control system emphasizes the intelligent control, monitoring and management of industrial automation processes and related equipment, and pays more attention to the real-time and business continuity of the system. That is to say, the industrial control system has high requirements on the availability, real-time, controllability and other characteristics of the system equipment.

Due to the proprietary nature of industrial control system equipment and communication protocols and the relative closeness of the system, it is difficult for general Internet hackers or hacker organizations to obtain the corresponding industrial control system attack and defense research environment and related system data support, so that the attack and defense research of hackers usually Most of the work is concentrated on the Internet or general IT information systems, and little attention is paid to industrial control systems. Security flaws or vulnerabilities of naturally related systems and communication protocols are rarely found.

However, with the occurrence of the “seismic network” in 2010 and a series of industrial safety incidents, it is indicated that the industrial control system has faced the new advanced technology initiated by these organizations for political, economic and military reasons of certain international organizations and countries. A constant threat of attack.

Safety problems and solutions for industrial control systems

Safety issues facing industrial control systems

At present, there are some serious security problems in industrial control systems, mainly as follows:

1. Serious vulnerabilities are difficult to deal with in time, and system security risks are huge.

The current mainstream industrial control systems are generally vulnerable to security vulnerabilities, and are mostly serious threats that can cause remote attacks and unauthorized execution. Moreover, the number of vulnerabilities in the past two years is increasing rapidly. Industrial control system communication protocols are numerous, system software is difficult to upgrade in time, equipment life cycle is long, system patch compatibility is poor, and the release period is long. It also causes patch management of industrial control systems, and it is difficult to deal with threats in a timely manner.

2. The industrial control system protocol lacks sufficient security considerations and is easily exploited by attackers.

Proprietary industrial control communication protocols or protocols are usually designed to emphasize only the real-time and availability of communications, and generally lack of security considerations such as lack of sufficient strength for authentication, encryption, authorization, and so on. In particular, wireless communication protocols in industrial control systems are more susceptible to eavesdropping and fraudulent attacks by third parties.

3. Lack of violations, unauthorized access to auditing capabilities

The technical level and safety awareness of the operation management personnel are quite different, and it is prone to unauthorized access and illegal operation, which poses a great safety hazard to the production system. In fact, the relatively closed environment of domestic ICS also makes the misoperation, illegal operation or deliberate destructive operation from the system system personnel at the application system level become the main security risk faced by the industrial control system. Therefore, it is necessary to monitor, manage and audit the access behavior of the production network, the content of specific control protocols and the authenticity and integrity of the database data.

However, the real-world environment usually lacks security log auditing and configuration change management for ICS. This is because some ICS systems may not have auditing capabilities or have log auditing capabilities but the performance requirements of the system determine the consequences of not being able to turn on auditing. At the same time, current security audit products cannot be directly used in ICS systems due to lack of analytical capabilities for industrial control system communication protocols, and require special customization. Due to the lack of uniform standards for industrial control system communication protocols, this customization work is costly and unusable, which is one of the reasons for the lack of auditing of illegal operation behaviors in ICS.

Safety problems and solutions for industrial control systems

4. There are not enough security policies and management systems, and there is a lack of awareness of personnel safety.

Because industrial control systems are not as hacked as the Internet or traditional enterprise IT networks, few hackers attacked industrial control networks before the “Shenzhen” incident occurred in 2010; industrial control systems are also designed more Considering the availability of the system, there are generally insufficient considerations for security issues, not to mention the development of a sound industrial control system security policy, management system, and the awareness of personnel safety. 'Peace for a long time' caused a low awareness of the safety of personnel.

WS2813 digital led trip is double signal transmission led pixel strip.

This is the special function of WS2813- Break-point resume.

that it means when one of the led bead was broken,the next led will still working.

With this function, the WS2813 is more suitable the large projects than other IC.

The more fast transmission rate and 256grays, the WS2813 Digital LED Strip is the first choice for large projects.

WS2813 Digital LED Strip

Dream Color LED Strip,Addressable RGB LED Strip,WS2813 LED Strip,WS2813 Digital LED Strip

SHEN ZHEN SEL LIGHTING CO.,LTD , https://www.sel-lighting.com