核电站DCS中抵御UDP重放攻击的研究

Research on Resisting UDP Replay Attack in Nuclear Power Station DCS

随着日渐严峻的网络环境,网络安全已成为核电安全体系的一个重要关注方向,核电站DCS作为一个以网络通信为基础的分布式系统,网络安全尤为重要。在网络攻击中,重放攻击是一种常见的攻击手段,在核电DCS常用的UDP协议中对抵御重放攻击的研究意义重大。实现了一种基于UDP协议的防范重放攻击方法,该方法能有效抵御重放攻击,保证受到攻击时系统能正常提供服务,同时内存和CPU负荷满足核电站DCS运行要求,目前已在核电站数字化仪控系统中进行了实现和应用,并已通过国家信息技术安全研究中心的信息安全检测。

With the increasingly serious network environment,network security has become an important focus of the nuclear power security system.DCS as a distributed system based on network communication,network security is especially important.In the network attacks,replay attack is a common attack method.It is of great significance to study resist attacks in the UDP protocol commonly used by nuclear power DCS.This paper implements an UDP-based method for preventing replay attacks.This method can effectively resist replay attacks and ensure that the system can provide services normally when attacked.At the same time,the memory and CPU load meet the DCS requirements of the nuclear power station.Currently,it has been implemented and applied in the nuclear power station digital control system SpeedyHold,and has passed the information security detection of the National Information Technology Security Research Center.