基于数据变化率检测的控制领域信息安全行为识别方法

Identification method of behaviors in OT security based on data change rate detection

随着两化融合的持续推进,信息安全问题不再仅存于信息网络,控制网络因自身的脆弱性问题,其攻击面相比较传统信息网络更大;又因其不可逆的特点,攻击影响范围更广。传统信息安全技术因兼容性、计算资源、容错性等多种问题,表现出极大的不适应性,如何构建行之有效的控制领域信息安全体系,切实保障生产过程的可用性,成为自动化与信息化从业者共同考虑的问题。在这一过程中,部分传统安全技术均需根据控制领域特点进行升级与优化。

With the continuous integration of IT and OT,the information security problems no longer exist only in the IT network.Due to its own vulnerability,the OT network has a larger attack surface and wider scope of impact.Due to various problems such as compatibility,computing resources,and fault tolerance,traditional IT security technology is not fully suitable for OT security.Therefore,how to build effective OT security system and ensure normal production process has become the common issue of both automation and information professionals.In this process,some IT security technologies need to be upgraded and trimmed according to the characteristics of the OT field.