山东省水利系统网络安全工作探索

Study on cybersecurity of water conservancy system in Shandong Province

摘要:

针对山东省水利系统网络安全威胁感知能力不强、应急处置水平不高等突出问题，结合水利信息系统现状及网络安全实际需求，在山东省水利厅部署态势感知系统平台，全省 16 个市部署网络流量采集引擎，不间断采集分析水利网络数据，实现安全态势实时感知和动态监测，对全省水利重要业务应用开展实战化网络攻防演练，深度检验水利信息系统防护、监测预警和应急处置等能力，进一步发现网络安全深层次问题和隐患。通过部署态势感知系统，开展网络攻防演练，山东省水利系统网络监测预警机制初步建立，网络安全工作队伍得到有效锻炼，网络安全整体水平显著提升，并为构建智慧水利时代全面、智能、联动的网络安全体系提供工作参考。

Abstract:

In view of the major cybersecurity problems in Shandong water conservancy system, such as low ability of threat perception and low level of emergency response, situational awareness platform is deployed based on the status of water conservancy application and actual needs of cybersecurity. The network flow collecting engines are deployed in 16 municipals in Shandong Province, which can collect and analyze water conservancy network data constantly, realize real-time security situation awareness and dynamic monitoring. Network attack and defense drill, aiming at the province`s water conservancy critical business applications, are carried out, so as to deeply test the ability of water conservancy information system protection, monitoring and early warning and emergency response, and further discover the deep-seated problems and hidden dangers of cybersecurity. Through the situational awareness system and network attack and defense drill, water conservancy system network monitoring and early warning mechanism in Shangdong Province are initially established, cybersecurity work team is exercised effectively and overall level of cybersecurity is improved obviously, which could provide references for the construction of a comprehensive, intelligent and interconnected cybersecurity system in the era of intelligent water conservancy.