基于靶场技术的DNC网络安全分析  

Cyber Range Based Security Analysis of DNC Protocol

作　　者：阎诗晨 张定华[1,2] 曹国彦[1] 潘泉[1] Yan Shichen Zhang Dinghua Cao Guoyan Pan Quan(School of National Secrecy, Northxvestem Poly technical University, Xian 710072 Information Center Electronic Document Management Office 9 General Office of the Communist Party of China 9Beijing 100050)

机构地区：[1]西北工业大学国家保密学院,西安710072 [2]中共中央办公厅信息中心电子文件管理处,北京100050

出　　处：《信息安全研究》2017年第6期560-567,共8页Journal of Information Security Research

基　　金：教育部3102017gx18002号科研基金支持

摘　　要：随着网络技术在分布式控制系统(distributed numerical control,DNC)中的使用与普及,传统的DNC系统面临越来越严峻的信息安全问题.为了深入分析网络化DNC系统的通信安全风险隐患,提出利用靶场技术构建DNC高逼真半实物平台的方法,分析DNC系统内的工业通信协议和文件传输协议及其安全性,特别得出了等时同步协议、DHCP和SSHv2面对的安全风险基于安全性分析,提出相应的DNC系统安全防护建议,为现实网络化制造系统的安全防护提供借鉴.Widely available, low-cost Internet Protocol （IP） devices are now replacing specialized proprietary control protocols in Distributed Numerical Control （DNC） system, which increases the possibility of cyber security vulnerabilities and incidents. In order to analyze the security of protocol in DNC system, in this paper, a cyber range technique for building DNC system is proposed. The potential risks against DNC system are then revealed based on the security analysis on the acquired boundary protocol. Respective to the risks, the boundary protection policies are formulated at last, suggesting the protection measures taken for real manufacturing industry.

关 键 词：络信息安全 分布式数控 网络化数控靶场 协议安全分析 DNC系统安全防护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]