Recommended Practice for Patch Management of Control Systems
Recommended Practice for Patch Management of Control Systems
复制标题
控制系统补丁管理的推荐实践
DOI：
--
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
Dan Berrett
中科院分区：
文献类型：
--
作者：
S. Tom;D. Christiansen;Dan Berrett
保护国家关键基础设施和关键资源的一个关键组成部分是控制系统的安全。工业控制系统一词是指监督控制和数据采集、过程控制、分布式控制以及控制、监视和管理国家关键基础设施的任何其他系统。关键基础设施和关键资源（CIKR）由发电机、输电系统、运输系统、水坝和供水系统、通信系统、化学和石油系统以及其他不能容忍服务突然中断的关键系统组成。简而言之，控制系统收集信息，然后根据其建立的参数和接收到的信息执行功能。 CIKR 中使用的工业控制系统软件的补丁管理往好了说是不一致的，往坏了说是不存在的。补丁对于解决安全漏洞和功能问题非常重要。本报告建议了补丁管理实践，供工业控制系统所有者考虑和部署。
A key component in protecting a nation’s critical infrastructure and key resources is the security of control systems. The term industrial control system refers to supervisory control and data acquisition, process control, distributed control, and any other systems that control, monitor, and manage the nation’s critical infrastructure. Critical Infrastructure and Key Resources (CIKR) consists of electric power generators, transmission systems, transportation systems, dam and water systems, communication systems, chemical and petroleum systems, and other critical systems that cannot tolerate sudden interruptions in service. Simply stated, a control system gathers information and then performs a function based on its established parameters and the information it receives. The patch management of industrial control systems software used in CIKR is inconsistent at best and nonexistent at worst. Patches are important to resolve security vulnerabilities and functional issues. This report recommends patch management practices for consideration and deployment by industrial control systems owners.