基于TPCM可信根的主动免疫控制系统防护设计

An active immune protection design for industrial control system based on trust root of TPCM

目前针对工业控制系统的安全风险与日俱增,传统“封堵查杀”的防护技术难以有效应对当前所面临的安全威胁,急需一套更适合工控系统环境的安全解决方案。结合我国自主创新的可信计算3.0关键技术,提出一种基于TPCM可信根的适用于工业控制系统的主动免疫防护方案,通过对关键节点的可信构建使工业控制系统防护更加透彻,安全处理融洽一致,为工业控制系统构建主动免疫防御能力,使之能够有效识别和防御未知威胁。

With the rapid development and application of industrial information,cybersecurity risks are increasing.The traditional"blocking and killing"protection technology is difficult to deal with the current security threats.There is an urgent need for a more suitable industrial control system environmental security solution.This paper combined with our country′s independent innovation of trusted computing 3.0 key technology,and proposed an active immune protection scheme based on the root of trust of Trusted Platform Control Module(TPCM)for industrial control systems.By constructing key trust nodes,it enhances the protection capabilities of industrial control systems,and handles security incidents in a harmonious and consistent manner,which builds active immune defense capabilities for industrial control systems,and can effectively identify and defend against unknown threats.