半定量信息工业控制异构网络安全评估

Semi-quantitative Information Industry Control Heterogeneous Network Security Assessment

工业控制系统的异构性及其与互联网深度融合给工控系统安全评估带来精度不高等诸多问题.本文提出一种基于半定量信息的工业异构网络安全态势评估模型,该模型可以提高评估精度,解决难以描述不确定性信息和难以契合工控异构网络复杂结构等现存问题.该方法将工业控制网络划分为不同异构子网,根据子网特点选取有针对性的评估属性,并使用性能优秀的ER规则对不同类型的评估属性进行融合,可以有效利用定性知识和定量数据,获得更加准确的评估结果.在多个实际工业控制网络数据集上进行评估实验得到的结果表明:本文提出的模型与网络安全评估实际参考值的均方根误差值比RF、BP、SVM模型分别降低了80.2%、40.8%和87.7%,验证了该模型的有效性和准确性.

The heterogeneity of industrial control system and its deep integration with internet bring numerous problems like low accuracy to the security assessment of industrial control systems.This paper proposes an industrial heterogeneous network security assessment model based on semi-quantitative information,which can improve the evaluation accuracy and solve existing problems such as difficult to describe uncertain information and difficulty to fit the complex structure of industrial control heterogeneous networks.This method divides industrial control networks into different heterogeneous sub-networks,selects targeted assessment attributes according to the characteristics of the sub-networks,and uses the excellent ER rules to fuse different types of assessment attributes,which can effectively use qualitative knowledge and quantitative data to obtain more accurate assessment results.The results of the assessment experiments on several practical industrial control network datasets show that the RMS error value between the proposed model and the network security assessment actual reference value are decreased by 80.2%,40.8%and 87.7%compared with the RF,BP and SVM models,respectively,verifying the effectiveness and accuracy of the model.