威胁DCS工业控制系统网络安全的病毒研究

Research on Virus Threatening DCS Industrial Control System Network Security

DCS控制系统广泛应用在电力、冶金、石油、化工等工业现场,是工业自动化的重要控制系统。随着工业互联网技术的应用,远程控制、远程诊断、无人车间等一系列智慧工厂解决方案的实施,工业产业朝着数字化、网络化、智能化方向发展,越来越多的工业控制网络与互联网连接,成为网络攻击的重点目标。从IT(Information Technology)/OT(Operational Technology)两个层面出发,整理威胁工业控制DCS系统网络安全的病毒分类、研究DCS控制系统的安全漏洞,设计一种模拟攻击该系统漏洞的病毒程序验证、研究关键基础设施的生产工艺,设计一种篡改该关键基础设施工艺指令的方法、简要讨论如何防御工控DCS系统IT、OT层网络攻击的方法,为工业生产者提供防护DCS网络安全的运行规程参考,以及网络安全设备研发者提供设计思路。

DCS control system is widely used in industrial sites such as power,metallurgy,petroleum,and chemical industry,and is an important control system in industrial automation.With the application of industrial Internet technology and the implementation of a series of smart factory solutions such as remote control,remote diagnosis and unmanned workshop,the industrial industry is developing towards the direction of digitalization,networking and intelligence.More and more industrial control networks are connected to the Internet,becoming the key target of network attacks.Starting from the two levels of IT(Information Technology)/OT(Operational Technology),this paper categorizes viruses that threaten the network security of industrial control DCS systems,studies security vulnerabilities in DCS control systems,designs a virus program to simulate attacks on system vulnerabilities,researches the production process of critical infrastructure,designs a method to tamper with the process instructions of the critical infrastructure,briefly discusses how to defend against IT and OT layer network attacks in industrial control DCS systems,provides reference for operating procedures to protect DCS network security for industrial producers,and provides design ideas for network security equipment developers.