The invention provides a commercial
password application construction method and device for a thermal power
plant DCS
system, and relates to the technical field of control systems, and the method comprises the steps: collecting the physical environment,
network topology, equipment configuration and
business data flow information of the DCS
system, recognizing a
password application gap, and generating a
risk assessment report; building a multi-dimensional
password demand model of
physical access control,
network communication encryption and the like based on the report, and outputting a structured
list; designing a five-layer deep defense
system from a
physical layer to a data layer, configuring a password product cooperating with an SM2 / SM4
algorithm, and establishing a key hierarchy mechanism; abnormal login, equipment health degree and
network attack intensity data are collected in real time, a comprehensive risk value is calculated, key updating is triggered according to a preset threshold value, and an
emergency response plan and log auditing are synchronously executed. According to the invention, the password
application security and the real-time protection capability of the DCS system of the thermal power
plant are effectively improved.