摘要
针对控制软件的防篡改问题,从工控安全角度出发,提出了一种利用多变体技术和虚拟化技术构建控制软件动态目标防御体系的新方法;通过多变体的异构冗余、动态重构和多模表决实现了软件层面的主动防御和安全态势感知,通过虚拟化技术实现了多变体执行环境的快速构建;着重介绍了技术路线、系统架构、动态重构策略、表决算法和同步机制;研究结果表明,该技术在提高控制系统可靠性的同时,使其具备了较强的主动安全防御能力。
To meet the anti--tamper requirement for control software, a new method is proposed to construct the moving target defense system of control software based on multi--variant and virtualization. The function of active defense and security situational awareness is achieved by heterogeneous redundancy, Dynamic reconfiguration and muttimode voting of variant, multi--variant execution environment is structured by virtualization. The technical route, system architecture, dynamic reconfiguration, voting algorithm and synchronization mechanism are detailed in this paper. The research results show that this technique can improve the reliability and security actively for industrial control systems.
出处
《计算机测量与控制》
2017年第1期105-106,110,共3页
Computer Measurement &Control
基金
国家重点研发计划项目(2016YFB0800203)
国防基础科研项目(JCKY2016212C005)
关键词
多变体
动态目标防御
工控安全
异构冗余
动态重构
multi-- variant
moving target defense
industrial control security
heterogeneous redundancy
dynamic reconfiguration
