嵌入式PLC的信息安全策略设计与实现  

Design and Application of Information Security in EPLC

作　　者：周浩[1] 黄双[1] 黄雄峰[1] 李科[1] 周纯杰[1] 

机构地区：[1]华中科技大学控制科学与工程系,武汉430074

出　　处：《计算机科学》2013年第9期125-129,共5页Computer Science

基　　金：国家自然科学基金项目(61272204);华中科技大学自主创新研究基金(2011ts029)资助

摘　　要：随着工业化和信息化深度融合以及系统网络互联的快速发展,工业嵌入式PLC控制系统中信息安全问题备受关注。针对嵌入式控制系统信息安全问题,设计了两级信息安全恢复控制机制:内环基于攻击特征库检测可识别入侵,并对比安全策略库制定安全策略;外环基于系统模型检测不可识别入侵,使用冗余技术进行处理。在构建的基于CortexA8-Linux的嵌入式PLC平台上,对信息安全策略进行实现并验证。实验结果表明,系统在保证实时性需求的同时,具有良好检测并处理其外部入侵的性能。With the deep integration of industrialization and inforrnationization and the rapid development of system net- work intercormection, the issues of information security in EPLC attract more attention. This paper proposed a two-level control framework to ensure the information security. Detection based on attack signature database is employed to draw up the control schemes for the identifiable instructions at the inner level. And at the external level, redundancy tech- niques are used to conquer the unidentifiable instructions which are detected based on system models. Finally, a test EPLC platform on CortexA8-Linux was established to realize and verify the proposed approach, and the experimental results show that the EPLC not only could meet the real-time requirement, but also could detect and process those ex-ternal instructions well.

关 键 词：嵌入式PLC LINUX 信息安全 入侵检测 入侵处理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]