PLC工控系统可信构建技术研究  

Research on Trusted Computing Constructing Technology for PLC System

作　　者：李孟君[1] 王乐东[1] 熊伟[1] 丁涵 

机构地区：[1]海军计算技术研究所,北京100841

出　　处：《软件导刊》2017年第11期168-171,175,共5页Software Guide

摘　　要：有效增强工业控制系统安全是信息安全领域研究热点和难点之一,将可信计算技术引入到工控系统是有效解决安全问题的新思路。以PLC工控系统为研究对象,阐述了PLC系统的体系架构和安全威胁,分析了将可信计算与PLC系统结合面临的问题和挑战。从上位机和下位机提出了基于TPM的可信PLC系统构建方案,该方案运用可信计算技术对上位机进行了安全增强,确保上位机运行环境的安全可控;运用身份认证机制,实现对上位机组态软件进行权限管理,防止攻击者恶意篡改和替换;运用数字签名技术,实现对逻辑组态和监控组态的可信软件分发管理。How to effectively enhance the security of industrial control system is an issue that is difficult to tackle and it attracts much attention in the field of information security.It is a creative approach to solve the security problems by using the trusted computing technology into ICS system.Firstly,the system architecture and security threats of PLC industrial control system are expounded,and the challenge of combining the trusted computing with PLC system is provided.And then,a construction scheme of trusted PLC system based on TPM is proposed,which carries out trusted enhancement from the upper computer and lower machine respectively.The scheme uses trusted computing technology to enhance the security of the computer controlled to ensure the safety of the PC running environment;the use of authentication mechanism realizes the configuration software engineering manage permissions,to prevent attackers from malicious tampering or replacement;the use of digital signature technology achieves the logical configuration and monitoring configuration of the trusted software distribution management.

关 键 词：工业控制系统 可编程逻辑控制器 可信计算 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]