面向工控网络安全和漏洞分析的攻击图生成研究  

Research on attack graph generation for industrial control network security and vulnerability analysis

作　　者：原锦明[1] 

机构地区：[1]晋城职业技术学院,山西晋城048026

出　　处：《现代电子技术》2016年第11期103-107,共5页Modern Electronics Technique

摘　　要：针对目前大部分工业控制网络缺乏必需的通信攻击防御能力问题,提出了一种攻击图生成技术,从而达到对工业控制网络的安全分析和漏洞分析的目的,给出了工业控制网络攻击图的生成算法及构建步骤,并应用生成的攻击图对工业控制系统网络进行了渗透测试和漏洞分析。最后通过"震网"病毒对生成的攻击图进行了实验,实验结果表明,按照上述理论生成的攻击图确实有效可行。Aiming at most industrial control systems lack of the necessary communication attack defense ability,an attack graph generation technique is proposed to achieve the security analysis and vulnerability analysis for the industrial control system network. The attack graph generation algorithm and construction steps of industrial control network are given. The penetration test and vulnerability analysis for industrial control system network were conducted with the generated attack graph. Finally,the generated attack graph was experimented by means of ＂stuxnet＂ virus. The experimental results show that the generated attack graph according to the above theory is effective and feasible.

关 键 词：工业控制系统网络 攻击图 渗透测试 漏洞分析 

分 类 号：TN911-34[电子电信—通信与信息系统] TM417[电子电信—信息与通信工程]