基于多变体的控制软件异构冗余与动态重构技术研究  

Research on Heterogeneous Redundancy and Dynamic Reconfiguration of Control Software Based on Multi-Variant

作　　者：员天佑[1] 刘金[1] 周小伟[1] 安宝冉 

机构地区：[1]中国工程物理研究院计算机应用研究所,四川绵阳621900

出　　处：《计算机测量与控制》2017年第1期105-106,110,共3页Computer Measurement &Control

基　　金：国家重点研发计划项目(2016YFB0800203);国防基础科研项目(JCKY2016212C005)

摘　　要：针对控制软件的防篡改问题,从工控安全角度出发,提出了一种利用多变体技术和虚拟化技术构建控制软件动态目标防御体系的新方法;通过多变体的异构冗余、动态重构和多模表决实现了软件层面的主动防御和安全态势感知,通过虚拟化技术实现了多变体执行环境的快速构建;着重介绍了技术路线、系统架构、动态重构策略、表决算法和同步机制;研究结果表明,该技术在提高控制系统可靠性的同时,使其具备了较强的主动安全防御能力。To meet the anti--tamper requirement for control software, a new method is proposed to construct the moving target defense system of control software based on multi--variant and virtualization. The function of active defense and security situational awareness is achieved by heterogeneous redundancy, Dynamic reconfiguration and muttimode voting of variant, multi--variant execution environment is structured by virtualization. The technical route, system architecture, dynamic reconfiguration, voting algorithm and synchronization mechanism are detailed in this paper. The research results show that this technique can improve the reliability and security actively for industrial control systems.

关 键 词：多变体 动态目标防御 工控安全 异构冗余 动态重构 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]