电厂工控信息安全半实物仿真模型研究  

Research on hardware in the loop simulation model based on industrial control system of power plant information security

作　　者：苏畅 熊申铎 罗安琴 张帅[2] 龚钢军 刘韧 刘文彬 吴秋新[2] Su Chang;Xiong Shenduo;Luo Anqin;Zhang Shuai;Gong Gangjun;Liu Ren;Liu Wenbin;Wu Qiuxin(Beijing Power System Information Security Engineering Technology Research Center in Energy Industry,North China Electric Power University,Beijing 102206,China;Beijing Information Science&Technology University, Beijing 100192,China;Beijing Excellent Network Security Technology Corp.,Ltd.,Beijing 102206,China)

机构地区：[1]华北电力大学北京市能源电力信息安全工程研究中心,北京102206 [2]北京信息科技大学,北京100192 [3]北京卓识网安技术股份有限公司,北京102206

出　　处：《信息技术与网络安全》2018年第10期5-9,共5页Information Technology and Network Security

基　　金：中央高校基本科研业务费专项资金项目(2017MS006);国家重点研发计划项目(2016YFB0901200)

摘　　要：依据物理隔离与专网防护的传统思路,工业控制系统(ICS)亟需解决"内在"的功能安全和"外在"的信息安全问题,以及构建"可信、可管、可控"环境下的ICS典型信息安全验证场景。为了适应ICS信息安全问题的研究与验证,基于ICS五层结构模型,建立工控信息模型并利用MATLAB来模拟电厂现场实际物理过程,利用Lab VIEW软件构造监控系统操作界面,通过OPC协议及共享变量引擎SVE实现Lab VIEW与MATLAB之间的实时数据交换,同时通过PLC来对现场数据进行采集,构建了ICS半实物仿真模型,对ICS信息安全防护提供了一种新思路。According to the traditional idea of physical isolation and private network protection,industrial control system(ICS)urgently needs to address the inherent functional security and external information security issues,as well as the construction of trusted,manageable,controllable ICS typical information security verification scenes.In order to adapt to the research and verification of ICS information security problem,this research is conducted based on the ICS five-layer structure model.Industrial information model is adopted to establish and use the MATLAB to simulate the actual physical process of power plant.LabVIEW software is used to construct the monitoring system operation interface.Real time data exchange between LabVIEW and MATLAB is realized by OPC protocol and shared variable engine(SVE).The collection of the field data is realized by PLC,and the data constructs the ICS semi-physical simulation model.A new idea for ICS information security protection is provided.

关 键 词：信息安全 工业控制系统 半实物仿真 共享变量引擎 数据采集 

分 类 号：TM743[电气工程—电力系统及自动化] TP391.9[自动化与计算机技术—计算机应用技术]