黄宏基，王战友

　　(广东省防汛保障与农村水利中心，广东 广州 510635)

　　摘 要：水利作为涉及国计民生的关键信息基础设施重要行业之一，在全球严峻的网络安全形势下，水利网络安全防护工作显得更为重要。为提升水利网络安全防护水平，有效降低网络安全隐患，对当前广东省水利网络安全存在的安全隐患展开分析，分别从通信网络、应用系统、数据、管理 4 个方面系统地分析当前水利网络安全存在的问题与风险，并从管理、技术、运营三大体系对水利网络架构进行总体设计，提出具有水利特点的“分区分域、多层防护”网络安全等级保护综合防御体系。通过部署落实相关安全策略和防护设备，可以有效提高网络安全的综合防御水平，为加强广东省水利网络安全防护和构建水利网络安全保障体系提供总体思路，具有一定的应用意义。

　　关键词：水利;网络安全;综合防御体系;数据安全;分区分域

　　Design of an integrated cyber security defense system for water conservancy in Guangdong Province

　　HUANG Hongji，WANG Zhanyou

　　(Guangdong Flood Protection and Rural Water Conservancy Center，Guangzhou 510635，China)

　　Abstract：Water conservancy is one of the important industries of critical information infrastructures relevant to the national economy and people’s livelihood. The cyber security protection of water conservancy is extremely important under the severe global network security situation. In order to improve the protection capacity of cyber security for water conservancy and to effectively reduce the hidden dangers of network security, this paper analyzes the problems and risks of current water conservancy cyber security in Guangdong Province from four aspects, which are communication network, application system, data and management. The master framework design of water conservancy network is carried out from management, technology and operation, and an integrated cyber security defense system is developed with multi-layers and zoning areas, showing the features of water conservancy. The implementation of relevant security strategies and protection equipment can effectively improve the defense capacity of cyber security, and provides references for Guangdong Province to strengthen the water conservancy cyber security protection and develop a water conservancy cyber security system, which is of significance for practice.

　　Key words：water conservancy;cyber security;integrated defense system;data security;zoning areas