工业控制系统网络安全态势感知框架研究  

Research on industrial control system cyber security situation awareness framework

作　　者：陶耀东 贾新桐[2,3] Tao Yaodong;Jia Xintong(Industrial control system security national local joint engineering laboratory,Beijing 100015,China;University of Chinese Academy of Sciences,Beijing 100049,China;Shenyang Institute of Computing Technology,University of Chinese Academy of Sciences,Shenyang 110168,China)

机构地区：[1]工业控制系统安全国家地方联合工程实验室,北京100015 [2]中国科学院沈阳计算技术研究所,辽宁沈阳110168 [3]中国科学院大学,北京100049

出　　处：《信息技术与网络安全》2018年第5期3-6,共4页Information Technology and Network Security

摘　　要：为促进工业控制系统安全积极防御水平的提升,加强态势感知能力,指出了建设工控安全态势感知的关键点,并提出了工控安全态势感知层次化框架。该框架在细化角色的同时,强化了数据驱动、协同共享的理念,可以为应急响应期间的科学决策提供有力支持。最后以乌克兰电网攻击事件为例,结合文章提出的框架进行分析,结果表明该框架能够有效帮助相关人员进行决策,降低事件的危害程度。For improving active defense ability of industrial control system and strengthening the construction of situational awareness,critical points of construction of industrial control system situational awareness and a hierarchical framework are presented. The framework details roles and strengthens concepts of data-driven and collaborative sharing. The framework can give powerful support to scientific decision-making in the period of emergency response. Finally,taking Ukraine＇s power grid as an example,we analyze the frame. The result indicates that this framework can support people＇s decision-making and action and lower the extent of influence.

关 键 词：工业控制系统 态势感知 协同共享 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]