工业控制系统上基于安全域的攻击图生成  

Attack graph generation method based the security domain on industrial control systems

作　　者：王得金[1] 江常青[2] 彭勇[2] 

机构地区：[1]国际关系学院,北京100091 [2]中国信息安全测评中心,北京100085

出　　处：《清华大学学报（自然科学版）》2014年第1期44-52,共9页Journal of Tsinghua University(Science and Technology)

摘　　要：将攻击图技术应用于工业控制系统(ICS),并基于工业控制系统网络结构特点,简化了攻击图的生成复杂度。该文将工业控制系统作为研究对象,下位机作为攻击目标,依据工业控制系统的层次化结构特点,提出了主机安全域和网络安全域的概念,对系统网络进行安全域划分实现攻击图的分布式生成,并依据划分结果使用攻击模式(remote/local)等要素来降低攻击图的生成复杂度。最后,通过搭建实验测试环境进行验证,实验结果表明本方法将会提高攻击图生成效率并简化攻击图规模。An attack graph technique is given for industrial control systems （ICS） that simplifies the complexity of the attack graph generation based on the characteristics of the control system network structure, The characteristics of the control system＇s hierarchical structure were analyzed to develop a host security domain and a network security domain. The network is divided into some security domains so that the attack patterns （remote/local） and other factors can be separated to reduce the complexity of the attack graph generation. Consequently, this method improves the production efficiency and simplifies the attack graph scale. The method is tested in a virtual network environment.

关 键 词：工业控制系统(ICS) 攻击图 安全域 风险评估 

分 类 号：TP29[自动化与计算机技术—检测技术与自动化装置]