黃宏基，王戰友

　　(廣東省防汛保障與農村水利中心，廣東 廣州 510635)

　　摘 要：水利作為涉及國計民生的關鍵信息基礎設施重要行業之一，在全球嚴峻的網絡安全形勢下，水利網絡安全防護工作顯得更為重要。為提升水利網絡安全防護水平，有效降低網絡安全隱患，對當前廣東省水利網絡安全存在的安全隱患展開分析，分別從通信網絡、應用系統、數據、管理 4 個方面系統地分析當前水利網絡安全存在的問題與風險，并從管理、技術、運營三大體系對水利網絡架構進行總體設計，提出具有水利特點的“分區分域、多層防護”網絡安全等級保護綜合防御體系。通過部署落實相關安全策略和防護設備，可以有效提高網絡安全的綜合防御水平，為加強廣東省水利網絡安全防護和構建水利網絡安全保障體系提供總體思路，具有一定的應用意義。

　　關鍵詞：水利;網絡安全;綜合防御體系;數據安全;分區分域

　　Design of an integrated cyber security defense system for water conservancy in Guangdong Province

　　HUANG Hongji，WANG Zhanyou

　　(Guangdong Flood Protection and Rural Water Conservancy Center，Guangzhou 510635，China)

　　Abstract：Water conservancy is one of the important industries of critical information infrastructures relevant to the national economy and people’s livelihood. The cyber security protection of water conservancy is extremely important under the severe global network security situation. In order to improve the protection capacity of cyber security for water conservancy and to effectively reduce the hidden dangers of network security, this paper analyzes the problems and risks of current water conservancy cyber security in Guangdong Province from four aspects, which are communication network, application system, data and management. The master framework design of water conservancy network is carried out from management, technology and operation, and an integrated cyber security defense system is developed with multi-layers and zoning areas, showing the features of water conservancy. The implementation of relevant security strategies and protection equipment can effectively improve the defense capacity of cyber security, and provides references for Guangdong Province to strengthen the water conservancy cyber security protection and develop a water conservancy cyber security system, which is of significance for practice.

　　Key words：water conservancy;cyber security;integrated defense system;data security;zoning areas