http://kadhoai.com.cn 2026-04-25 03:17:46

記者:胡總,您認為目前中國工業控製係統安全的發展現狀是怎樣的?
胡總:工信部於2011年出台了451號文件,451號文件的要求是對中國的基礎設施尤其是工業控製網絡進行安全檢測,集中發現問題並給出安全預案。在2011年之後很多企業開始了這方麵的探索,但因為當時缺乏專業的工控網絡安全企業來幫助政府完成任務,所以效果不是很明顯。2013年(nian)之(zhi)後(hou),這(zhe)些(xie)企(qi)業(ye)開(kai)始(shi)湧(yong)現(xian),包(bao)括(kuo)穀(gu)神(shen)星(xing),也(ye)包(bao)括(kuo)一(yi)些(xie)國(guo)外(wai)的(de)成(cheng)熟(shu)的(de)技(ji)術(shu)及(ji)產(chan)品(pin)開(kai)始(shi)進(jin)入(ru)中(zhong)國(guo),使(shi)我(wo)國(guo)的(de)工(gong)控(kong)領(ling)域(yu)得(de)以(yi)迅(xun)速(su)地(di)發(fa)展(zhan)。目(mu)前(qian)從(cong)國(guo)家(jia)的(de)層(ceng)麵(mian)來(lai)講(jiang)對(dui)工(gong)業(ye)控(kong)製(zhi)網(wang)絡(luo)安(an)全(quan)是(shi)非(fei)常(chang)重(zhong)視(shi)的(de),因(yin)為(wei)工(gong)業(ye)網(wang)絡(luo)安(an)全(quan)從(cong)本(ben)質(zhi)上(shang)講(jiang)是(shi)基(ji)礎(chu)設(she)施(shi)安(an)全(quan),一(yi)旦(dan)出(chu)現(xian)重(zhong)大(da)的(de)網(wang)絡(luo)安(an)全(quan)事(shi)故(gu),影(ying)響(xiang)和(he)損(sun)失(shi)無(wu)法(fa)估(gu)量(liang)。此(ci)外(wai),企(qi)業(ye)領(ling)導(dao)層(ceng)也(ye)在(zai)紛(fen)紛(fen)響(xiang)應(ying)國(guo)家(jia)的(de)號(hao)召(zhao),並(bing)對(dui)工(gong)控(kong)網(wang)絡(luo)安(an)全(quan)這(zhe)塊(kuai)積(ji)極(ji)地(di)響(xiang)應(ying),積(ji)極(ji)采(cai)取(qu)措(cuo)施(shi)落(luo)實(shi)。所(suo)以(yi)從(cong)市(shi)場(chang)角(jiao)度(du)來(lai)講(jiang),目(mu)前(qian)正(zheng)處(chu)於(yu)工(gong)控(kong)安(an)全(quan)市(shi)場(chang)爆(bao)發(fa)的(de)前(qian)夕(xi),企(qi)業(ye)需(xu)要(yao)去(qu)培(pei)育(yu)市(shi)場(chang)、把握用戶的需求,把質量可靠的安全產品推廣出去。這個過程一般都有一個試用及摸索的階段,但是,工控安全的前景不可估量。

穀神星網絡科技(北京)有限公司董事長兼CEO 胡浩
記者:您認為保障工業控製網絡安全的核心環節是什麼?
胡總:核he心xin的de環huan節jie就jiu是shi,第di一yi是shi知zhi己ji,需xu要yao對dui整zheng個ge網wang絡luo進jin行xing一yi個ge徹che底di的de了le解jie,做zuo到dao心xin中zhong有you數shu。工gong控kong網wang絡luo到dao底di存cun在zai什shen麼me問wen題ti,有you什shen麼me缺que陷xian和he風feng險xian,我wo們men需xu要yao采cai用yong什shen麼me樣yang的de技ji術shu措cuo施shi,需xu要yao提ti高gao到dao什shen麼me樣yang的de水shui平ping;dierjiushizhibi,jiaruduifangzhidaowodezhexiewentihoutamenhuicaiqushenmeyangdegongjishouduan,dangran,youshihoubentudexinxianquanyekenengshiyinweigongzuorenyuanshiwuhuozhecaozuoyichangdaozhide。name,zhijizhibizhihoune,xuyaojinxingyitaowanzhengdefanghufangan,xuyaojiangwanzhengdefanghufanganbushudaowomendekongzhixitonglimian,zuodaowanwuyishi,tongchangjiagugongkongwangluoanquan,zheshiwomenxuyaozuodejigebuzhou。
記者:企qi業ye為wei工gong業ye控kong製zhi係xi統tong部bu署shu傳chuan統tong的de信xin息xi安an全quan防fang護hu產chan品pin會hui存cun在zai哪na些xie問wen題ti?與yu傳chuan統tong的de信xin息xi安an全quan防fang護hu體ti係xi相xiang比bi,工gong控kong安an全quan係xi統tong存cun在zai哪na些xie專zhuan業ye性xing特te點dian?
胡總:首先,我們國家工業4.0水平還是比較弱的,很多企業都已經開始投入、建(jian)設(she)智(zhi)能(neng)工(gong)廠(chang)。如(ru)果(guo)僅(jin)僅(jin)是(shi)對(dui)信(xin)息(xi)安(an)全(quan)防(fang)護(hu)的(de)話(hua),把(ba)自(zi)己(ji)的(de)工(gong)廠(chang)整(zheng)個(ge)控(kong)製(zhi)係(xi)統(tong)互(hu)通(tong)互(hu)聯(lian)了(le)以(yi)後(hou),實(shi)際(ji)上(shang)是(shi)存(cun)在(zai)很(hen)大(da)的(de)缺(que)陷(xian)和(he)風(feng)險(xian)的(de)。由(you)於(yu)接(jie)口(kou)的(de)放(fang)開(kai),黑(hei)客(ke)通(tong)過(guo)放(fang)開(kai)的(de)接(jie)口(kou)直(zhi)接(jie)攻(gong)入(ru)我(wo)們(men)的(de)係(xi)統(tong),而(er)我(wo)們(men)的(de)係(xi)統(tong)本(ben)身(shen)這(zhe)些(xie)控(kong)製(zhi)設(she)備(bei)是(shi)存(cun)在(zai)網(wang)絡(luo)安(an)全(quan)漏(lou)洞(dong)的(de),那(na)麼(me)通(tong)過(guo)對(dui)這(zhe)些(xie)漏(lou)洞(dong)的(de)利(li)用(yong),會(hui)造(zao)成(cheng)一(yi)定(ding)程(cheng)度(du)的(de)破(po)壞(huai)和(he)損(sun)失(shi)。
工(gong)控(kong)係(xi)統(tong)對(dui)係(xi)統(tong)的(de)可(ke)用(yong)性(xing)及(ji)實(shi)時(shi)性(xing)要(yao)求(qiu)非(fei)常(chang)高(gao),而(er)傳(chuan)統(tong)信(xin)息(xi)行(xing)業(ye)最(zui)關(guan)注(zhu)的(de)是(shi)信(xin)息(xi)本(ben)身(shen)安(an)全(quan),所(suo)以(yi)兩(liang)者(zhe)的(de)關(guan)注(zhu)點(dian)不(bu)一(yi)樣(yang)。另(ling)外(wai),工(gong)控(kong)行(xing)業(ye)中(zhong)的(de)工(gong)控(kong)產(chan)品(pin)更(geng)新(xin)換(huan)代(dai)周(zhou)期(qi)非(fei)常(chang)長(chang),有(you)些(xie)係(xi)統(tong)已(yi)經(jing)運(yun)行(xing)了(le)十(shi)幾(ji)年(nian)還(hai)在(zai)服(fu)役(yi),不(bu)像(xiang)現(xian)在(zai)的(de)傳(chuan)統(tong)信(xin)息(xi)產(chan)業(ye),三(san)兩(liang)年(nian)就(jiu)要(yao)更(geng)新(xin)換(huan)代(dai),更(geng)換(huan)硬(ying)件(jian)設(she)備(bei)。至(zhi)於(yu)軟(ruan)件(jian)係(xi)統(tong),傳(chuan)統(tong)信(xin)息(xi)行(xing)業(ye)軟(ruan)件(jian)時(shi)常(chang)要(yao)更(geng)新(xin),就(jiu)算(suan)更(geng)新(xin)失(shi)敗(bai),係(xi)統(tong)重(zhong)啟(qi)也(ye)不(bu)會(hui)造(zao)成(cheng)太(tai)大(da)的(de)影(ying)響(xiang)和(he)損(sun)失(shi)。工(gong)控(kong)係(xi)統(tong)因(yin)為(wei)直(zhi)接(jie)控(kong)製(zhi)生(sheng)產(chan)設(she)備(bei),如(ru)果(guo)沒(mei)有(you)重(zhong)大(da)缺(que)陷(xian),在(zai)不(bu)影(ying)響(xiang)生(sheng)產(chan)的(de)條(tiao)件(jian)下(xia),不(bu)允(yun)許(xu)更(geng)新(xin)升(sheng)級(ji)軟(ruan)件(jian),而(er)且(qie)硬(ying)件(jian)係(xi)統(tong)都(dou)備(bei)有(you)冗(rong)餘(yu)設(she)備(bei),要(yao)求(qiu)控(kong)製(zhi)係(xi)統(tong)不(bu)能(neng)有(you)無(wu)計(ji)劃(hua)的(de)停(ting)機(ji)或(huo)者(zhe)重(zhong)啟(qi),否(fou)則(ze)有(you)可(ke)能(neng)引(yin)起(qi)重(zhong)大(da)生(sheng)產(chan)損(sun)失(shi)或(huo)者(zhe)人(ren)身(shen)傷(shang)害(hai)事(shi)故(gu)。
記者:針對不同行業和不同規模的企業,該如何進行工控安全類產品的選型?
胡總:工gong控kong安an全quan產chan品pin的de選xuan型xing,第di一yi重zhong要yao的de是shi產chan品pin要yao技ji術shu領ling先xian且qie質zhi量liang可ke靠kao,隻zhi有you采cai用yong了le先xian進jin的de安an全quan控kong製zhi技ji術shu,才cai能neng保bao護hu好hao工gong控kong產chan品pin,當dang然ran,如ru果guo質zhi量liang不bu可ke靠kao,本ben身shen就jiu談tan不bu上shang對dui產chan品pin進jin行xing有you效xiao的de保bao護hu了le。其qi次ci,看kan企qi業ye在zai業ye界jie的de口kou碑bei和he市shi場chang占zhan有you率lv,好hao的de產chan品pin,市shi場chang會hui舉ju手shou投tou讚zan成cheng票piao;buhaodechanpin,shichangzhihuiyongjiaotoupiaole。zuihou,yaokanqiyeshifouzaibutongxingyeyouyingyonganli,shifoumouxieqiyezhuanzhuyumouxiexingye,tongchangxuqiuqiyehuiduizaitongxingyeyouyejidegongkonganquanchanpinbijiaoqinglai。
穀神星的安全防護產品,是通過來自斯坦福大學、卡耐基梅隆大學、清華大學、北bei京jing大da學xue等deng國guo內nei外wai頂ding尖jian大da學xue的de自zi主zhu研yan發fa團tuan隊dui開kai發fa的de,融rong合he了le國guo內nei外wai最zui先xian進jin的de安an全quan架jia構gou和he模mo塊kuai,技ji術shu在zai國guo內nei外wai處chu於yu領ling先xian地di位wei。穀gu神shen星xing在zai國guo內nei重zhong要yao合he作zuo單dan位wei有you工gong業ye控kong製zhi係xi統tong信xin息xi安an全quan技ji術shu國guo家jia工gong程cheng實shi驗yan室shi、工控設備龍頭製造商、工控係統集成商、工控研究方向的科研院所和重點高校、國家和省級測評單位、fadianjituandeng。gongsixianhouchengweilegongyekongzhianquanjishuguojiagongchengshiyanshilishihuilishi,gongyekongzhixitongxinxianquanchanyelianmengchengyuan。weijianliwoguozizhudegongkonganquanfanghutixi,tishenggongkonganquanhexinjingzhengligongxianleliliang。
記者:隨著去IOE化及國家智能製造的要求,國內工控安全係統廠商將麵臨哪些機會和挑戰?
胡總:當dang前qian的de工gong控kong安an全quan還hai是shi比bi較jiao嚴yan峻jun的de,之zhi前qian很hen多duo的de基ji礎chu設she施shi行xing業ye對dui自zi己ji的de認ren識shi不bu足zu,但dan是shi有you些xie行xing業ye做zuo得de還hai是shi很hen不bu錯cuo的de。像xiang電dian力li行xing業ye本ben來lai已yi經jing采cai取qu了le橫heng向xiang隔ge離li,縱zong向xiang加jia密mi,很hen多duo安an全quan措cuo施shi都dou已yi經jing有you自zi己ji的de規gui範fan和he標biao準zhun,還hai有you其qi他ta的de行xing業ye像xiang燃ran氣qi還hai有you石shi油you石shi化hua,在zai管guan理li規gui範fan上shang也ye有you很hen多duo的de措cuo施shi,比bi如ru說shuo移yi動dong媒mei介jie不bu能neng隨sui便bian使shi用yong,封feng閉bi網wang絡luo環huan境jing等deng。總zong的de來lai講jiang,我wo們men國guo家jia的de一yi些xie基ji礎chu設she施shi行xing業ye本ben身shen已yi經jing采cai取qu了le一yi些xie管guan理li防fang範fan措cuo施shi,好hao些xie行xing業ye對dui安an全quan的de意yi識shi正zheng在zai逐zhu步bu的de增zeng強qiang,對dui安an全quan的de需xu要yao越yue來lai越yue強qiang,越yue來lai越yue高gao。麵mian對dui“震網事件”、“烏克蘭電網事件”,大da家jia都dou意yi識shi到dao,如ru果guo我wo們men不bu對dui工gong控kong係xi統tong加jia以yi重zhong視shi,不bu去qu安an全quan加jia固gu,造zao成cheng的de後hou果guo就jiu是shi,某mou一yi個ge地di方fang的de基ji礎chu設she施shi發fa生sheng一yi次ci嚴yan重zhong的de網wang絡luo安an全quan事shi故gu之zhi後hou,造zao成cheng的de損sun失shi無wu論lun政zheng治zhi影ying響xiang亦yi或huo是shi經jing濟ji影ying響xiang都dou是shi巨ju大da的de,不bu可ke估gu量liang的de。從cong整zheng個ge市shi場chang的de投tou入ru來lai看kan,我wo國guo現xian在zai對dui工gong控kong網wang絡luo安an全quan這zhe塊kuai投tou入ru相xiang對dui較jiao少shao,一yi年nian隻zhi有you幾ji十shi億yi,還hai不bu到dao一yi百bai億yi的de投tou資zi,而er如ru果guo發fa生sheng一yi起qi安an全quan網wang絡luo事shi故gu,一yi個ge基ji礎chu設she施shi的de損sun失shi就jiu有you可ke能neng超chao過guo百bai億yi。所suo以yi說shuo,這zhe就jiu是shi我wo們men要yao加jia強qiang網wang絡luo基ji礎chu設she施shi安an全quan的de原yuan因yin。除chu了le經jing濟ji和he政zheng治zhi的de影ying響xiang因yin素su,最zui重zhong要yao的de還hai是shi人ren身shen安an全quan,對dui於yu控kong製zhi係xi統tong來lai講jiang,它ta的de最zui大da問wen題ti就jiu是shi會hui涉she及ji到dao人ren身shen安an全quan。穀gu神shen星xing作zuo為wei這zhe一yi行xing業ye的de領ling軍jun企qi業ye,也ye在zai積ji極ji地di與yu各ge個ge行xing業ye,政zheng府fu層ceng麵mian接jie洽qia,我wo們men已yi和he省sheng級ji的de信xin息xi安an全quan測ce評ping中zhong心xin進jin行xing合he作zuo,對dui關guan鍵jian的de企qi業ye進jin行xing檢jian查zha,並bing給gei出chu我wo們men的de解jie決jue方fang案an幫bang他ta們men去qu加jia固gu自zi己ji的de工gong控kong係xi統tong網wang絡luo安an全quan,為wei工gong控kong行xing業ye的de安an全quan貢gong獻xian自zi己ji的de力li量liang。
另外,IOE化對國內廠商,無論是做安全的也好,服務器的也好,操作係統的也好都是一次機會。同時,我們也需要認識到國外對安全的意識、市(shi)場(chang)行(xing)為(wei)以(yi)及(ji)技(ji)術(shu)相(xiang)比(bi)國(guo)內(nei)還(hai)是(shi)領(ling)先(xian)的(de),但(dan)是(shi)隨(sui)著(zhe)國(guo)外(wai)人(ren)才(cai)的(de)回(hui)歸(gui),也(ye)帶(dai)回(hui)來(lai)一(yi)些(xie)比(bi)較(jiao)新(xin)的(de)理(li)念(nian)和(he)技(ji)術(shu),這(zhe)使(shi)得(de)工(gong)控(kong)安(an)全(quan)領(ling)域(yu)的(de)整(zheng)體(ti)技(ji)術(shu)門(men)檻(kan)提(ti)升(sheng)了(le)不(bu)少(shao)。個(ge)人(ren)淺(qian)見(jian):中國的安全企業不能閉門造車,要經常去國外學習、交流、研究國外最新的技術,並根據中國工控企業的實際應用情況消化吸收,研發出先進、可靠的產品出來,迎接即將騰飛的中國工控安全行業的發展。