煤矿工业互联网信息安全风险评估

Information security risk assessment of industrial Internet of coal mine

  • 摘要: 针对煤矿工业互联网信息安全防护手段多应用于较小区域、难以对整体信息安全风险进行评估的问题,提出了一种基于静态和动态2个维度的煤矿工业互联网信息安全风险评估方法。该方法根据《信息安全技术 网络安全等级保护基本要求》及GB/T 34679—2017《智慧矿山信息系统通用技术规范》,对煤矿信息系统已实施的安全防护条例进行特征化转换,建立各系统中安全防护要求的关联系数矩阵,进而计算出系统实际实施的安全防护条例数量;再结合威胁发生数和发生更高级风险的概率,建立安全风险评估模型,进而对煤矿工业互联网进行信息安全风险评估。测试结果表明,该方法能有效评估煤矿工业互联网信息安全状况,指导煤矿企业进行信息安全风险分析、安全防护规划设计及实施,从而降低煤矿工业互联网信息安全风险。

     

    Abstract: For problems that information security protection measures of industrial Internet of coal mine were mostly applied to small areas and it was difficult to assess the whole information security risk, an information security risk assessment method of industrial Internet of coal mine was proposed which was based on static and dynamic dimensions. In the method, security protection regulations carried out in coal mine information systems are feature-transformed according to Information Security Technology-baseline for Classified Protection of Cybersecurity and GB/T 34679-2017 General Technical Specifications for Smart Mine Information Systems, and a correlation coefficient matrix of security protection requirements for each system is established, so as to calculate the number of security protection regulations which are actually carried out in the system. Then, a security risk assessment model is established by combining with risk number and probability of higher risk category, so as to assess information security risk of industrial Internet of coal mine. The test result shows that the method can effectively assess information security status of industrial Internet of coal mine, and guide coal mine enterprise to analyze information security risk and design and carry out security protection plan, so as to decrease information security risk of industrial Internet of coal mine.

     

/

返回文章
返回