工业控制系统信息安全问题探讨

Discussion on Information Security of Industrial Control System

针对电厂控制系统安全风险评估方案存在的主观性强、不确定因数大的问题,对用于电厂控制系统的安全风险评估系统的结构模型进行详细分析,同时对安全风险评估的评估流程、评估算法中的D数理论、D-AHP评估方法、TOPSISI评估方法进行详细分析。对基于D-AHP、TOPSIS风险评估算法进行实例分析,建立简单电厂控制系统安全风险评估体系,求解影响各指标的权重值并得到电厂控制系统安全风险值。分析结果表明,上述两种安全风险评估方法的正确性和有效性,同时解决了传统安全风险评估方法存在的主观性强、不确定性因素多的问题,提高了安全风险评估的准确性和有效性,不过度依赖专家经验;还简化了电厂控制系统安全风险指标和过程,完善了安全风险评估指标体系。

In view of the strong subjectivity and large uncertain factors of the power plant control system safety risk assessment plan,a detailed analysis of the structural model of the safety risk assessment system for the power plant control system was carried out,and the safety risk assessment evaluation process and evaluation algorithm were also analyzed in detail.The D number theory D-AHP evaluation method,and TOPSISI evaluation method were analyzed in detail.The risk assessment algorithm was analyzed based on D-AHP and TOPSIS,a simple power plant control system safety risk assessment index system was established and constructed,the weight values that affect each index was solved,and the power plant control system safety risk value was obtained.The analysis results show that the above two safety risk assessment methods are correct and effective,solve the problems of strong subjectivity and many uncertain factors in the traditional safety risk assessment methods,improve the accuracy and effectiveness of safety risk assessment,and do not rely too much on expert experience.It also simplifies the safety risk index and process of power plant control system,and improves the safety risk assessment index system.