工业控制网络安全脆弱性分析技术研究

Research on Vulnerability Analysis Technology of Industrial Control System

随着工业控制网络与互联网的深入融合,攻击者利用工业控制网络的安全漏洞对关键基础设施进行破坏,这对工业生产造成了极大的安全威胁。利用攻击图技术对工业控制网络进行脆弱性分析,提出了一种安全修复选择策略。该策略利用工业控制网络主机资产的分层特点和漏洞的威胁程度来评估所有可能攻击路径的安全风险,进而选择安全风险最高的攻击路径进行修复。最后,在模拟的网络环境中验证了其可行性和合理性。

With the deep integration of industrial control network and Internet,attackers exploit vulnerabilities in industrial control systems to disrupt critical infrastructure,and that poses a great security threat to industrial production.In the paper,the attack graph is used to analyze the industrial control network vulnerability,then an industrial control system repair strategy is proposed based on the combination of host assets and threats from those vulnerabilities.The strategy takes into account the hierarchical nature of the host assets of industrial control network and the periodicity of exploiting vulnerability to evaluate the security risk value of vulnerabilities.Then,security risk values of attack paths are taken as the selection criteria of repair strategies.Finally,the feasibility and rationality of the proposed scheme are verified in the simulated network environment.