At CST, we are convinced that we need to create value not only for our Customers, Employees, and Shareholders but also for Society. As a responsible company we sustainably commit to contribute actively to local communities, local markets and more broadly to the planet. That is why we’ve developed a Corporate Social Responsibility (CSR) Program structured around 4 key pillars: Environment, Ethic, “Fair Employer”, andCommunity. We proactively act to protect the environment by putting in place an efficient Environment management system everywhere. We proactively promote and respect an ethical way to do business. We deploy rigorously our “Principles of Responsibility”. We behave exemplary as an employer providing the right environment for our employees, promoting diversity (gender, ethnical, social origin),and providing medical coverage to all our employees. And finally as a local and global actor, we contribute to the development of the communities where we operate in America, Asia, Africa and Europe.
工业自动化控制系统(Industrial Automation Control System)构成了我国工业基础设施的神经系统,关键自动化控制应用或系统中潜在的安全漏洞一旦被利用,很可能会导致控制系统误操作、拒绝服务、死机、系统瘫痪等,并进一步导致人员伤亡、严重的经济损失、基础设施被破坏、危及公众生活及国家安全、环境灾难等严重后果。今年9月,工信部发布了“关于加强工业控制系统信息安全管理的通知”,强调了“加强工业控制系统信息安全管理的重要性和紧迫性”,明确提出了重点领域工业控制系统信息安全管理要求。
作为国际上应用前景广阔的工业以太网标准,PROFINET即符合TCP/IP和IT标准,又支持符合工业自动化控制需要的高速实时(RT、IRT)通信等。但工业自动化控制系统在享受TCP/IP与IT技术所带来的进步与利益的同时,也面临着越来越严重的安全威胁。与传统的IT信息安全相比,PROFINET的信息安全有着其自身的特点,主要体现为安全防护的重点有所不同。本文针对PROFINET的典型应用场景,对PROFINET网络面临的安全风险进行了系统、深入的分析,并在此基础上提出了基于纵深防御理念的安全解决方案。