Research on security risks and response strategies of cloud based industry software
Meng Xiangxi，Yao Huan，Du Hongtao
Institute of System Research, China Industrial Control Systems Cyber Emergency Response Team
Abstract： With the rapid development of cloud computing technology, cloud based industrial software has become a key driving force for the digital transformation of manufacturing, but it also faces increasingly complex security risks and challenges, which have been widely valued. The security risks of cloud based industrial software mainly come from the technical level, information and communication level, business management level, and external constraint level, include four aspects: technology and architecture, network and access control, personnel and processes, as well as legal and compliance. Based on the analysis of these security risks, a response strategy of introducing endogenous security methods into the full lifecycle management of cloud based industrial software is proposed to ensure the stable operation of the system and the security and reliability of data. At the same time, the study discussed the key points and main characteristics of the construction of an endogenous security management system for cloud based industrial software, providing a specific path for the security risk management of cloud based industrial software.
Key words : cloud based industrial software; security risks; full lifecycle management; endogenous security
