信息物理系统安全威胁与措施

Security threats and measures for the cyber-physical systems

随着信息物理系统(cyber-physical systems,CPS)理念的提出,各国政府、企业和科研机构纷纷加入信息物理系统的研究和建设工作。信息物理系统的建设与发展必然受到信息物理系统安全和隐私问题的制约,为理清信息物理系统目前存在的安全威胁、为信息物理系统安全与隐私保护提供理论参考,本文总结了信息物理系统面临的安全威胁,提出了相应的安全措施。根据信息物理系统目前主流体系架构,分别从感知执行层、数据传输层和应用控制层对安全威胁进行研究。感知执行层安全威胁研究主要针对传感器、执行器等节点的安全问题。数据传输层安全威胁研究主要针对数据泄露或破坏以及海量数据融合等安全问题。应用控制层安全威胁研究主要针对用户隐私泄露、访问控制措施设置不当与安全标准不完善等问题。最后,针对各类安全威胁给出了相应的安全措施及建议。

Governments,companies and research institutes are pushing the research and development of cyber-physical systems（CPS）.However,the development of cyber-physical systems is constrained by security and privacy threats.This paper summarizes security threats to cyber-physical systems as a theoretical reference for the study of cyber-physical systems and to provide useful security measures.The architecture of the cyber-physical systems is used to classify threats for the perception-execution layer,transport layer and application-control layer.The perception-execution layer threats include security threats for nodes such as sensors and actuators.Transport layer threats include data leakage or damage and security issues during massive data integration.Application-control layer threats include the loss of user privacy,incorrect access control policies and inadequate security standards.Finally,this paper gives security measures and recommendations for all types of security threats.