石化MES控制网络安全分析与实践

石化 MES 控制网络平安分析与实践 刘钰，郑雯，彭文辉〔中国石油乌鲁木齐石化分公司，新疆 乌鲁木齐 830019〕 摘要： 石化 MES 是我国石化企业信息化建设的重点内容。基于管控一体化的主导思想，石化 MES的核心功能是基于实时数据库的生产调度管理，并以实现对控制系统的数据采集作为必要前提条件。随着越来越多的石化企业推广、应用 MES，就有越来越多的控制网络被接入到信息网络中，控制网络的开放已经成为大势所趋。但网络开放的同时，带来的平安问题就更加严峻了，各种平安问题如病毒、攻击和入侵等已经引起了人们的高度重视。 本文针对石化企业 MES 系统涉及的控制网络平安问题进行了系统地分析，并结合在乌石化的实践情况，提出适合行业特点的平安对策。 关键词：MES；控制网络平安 Liu Yu，Zheng Wen，Peng Wenhui〔Urumchi PetroChina，Urumchi，Sinkiang，830019，China〕 Abstract：MES plays a very important role in a information system in petrolchemical industry. In order to implement supervisory and control, MES implementation must be focused on supervisory, task schedule, sources arrangement which are based on RTDB and data acquisition from DCS. With the rapid progress of MES implementation in petrochemical plants, more and more control networks are being connected to factory information networks, It is difficult to prevent control networks from being connected to office networks. The opening control networks can cause severe security problems. Factories should pay attention to defend against virus, hacker intrusion for control networks, as well as DCSes and PLCs. When a factory intends to implement a MES project, the security issues of control networks should be taken into account. This paper analyzes most of factors related with the security of control networks. Paper also introduces a case implemented by the authors team in Urumchi PetroChina. Urumchi model could provide a reference to most of petrochemical plants. Keywords：MES；Sec...