Industrial control system standard compliance evaluation system

Abstract

The invention discloses an industrial control system standard compliance evaluation system, which includes an evaluation module, a topology generation module, an asset management module and a report management module. The beneficial effect of the present invention is: carry out the conformity evaluation of relevant standards to the industrial control system, fully consider the particularity of the industrial control system and the safety requirements of different levels, carefully sort out the assets of the industrial control system system of the unit, and consider the environmental and human factors Analyze the threats faced by the industrial control system, analyze the vulnerability of the industrial control system from the aspects of technology and management, combine the existing security measures, analyze the existing risks of the industrial control system, balance the benefits and costs, formulate a risk treatment plan, and integrate the industrial The residual risk of the control system is controlled at an acceptable level, and the information security strategy is adjusted according to the evaluation results to help industrial enterprises improve their information security protection capabilities.

Description

technical field [0001] The invention relates to an evaluation system, in particular to an industrial control system standard compliance evaluation system, which belongs to the field of network security protection. Background technique [0002] At present, my country has made some progress in security protection technology products such as industrial firewalls, routers, and gateways. However, the lack of security protection technical standards for industrial control systems has led to a lack of information security considerations in the design phase of industrial control systems, and a lack of security in the construction phase of industrial control systems. At the same time, there is a lack of necessary basis and guidance when adding security protection measures to existing industrial control systems. Therefore, it is necessary to strengthen the research and formulation of industrial control system safety technology standards, standardize protection methods, and promote the p...

AI Technical Summary

Problems solved by technology

[0004] At present, there are problems such as insufficient practicability in my country's existing industrial control system information security assessment standards, and it is impossible to guide my country's industrial enterprises to carry out industrial control system information security risk assessment work in actual work.

Images