信息物理融合系统综合安全威胁与防御研究  

Integrated Security Threats and Defense of Cyber-physical Systems

作　　者：刘烃[1] 田决 王稼舟 吴宏宇 孙利民[3] 周亚东[1] 沈超[1] 管晓宏[1,4] LIU Ting;TIAN Jue;WANG Jia-Zhou;WU Hong-Yu;SUN Li-Min;ZHOU Ya-Dong;SHEN Chao;GUAN Xiao-Hong(Key Laboratory of Intelligent Network and Network Secu-rity,Xi0an Jiao Tong University,Xi0an 710049,China;ECEDepartment,Kansas State University,Manhattan,Kansas State66506,USA;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;Center for In-telligent and Networked Systems,Department of Automation,Tsinghua University,Beijing 100084,China)

机构地区：[1]西安交通大学智能网络与网络安全教育部重点实验室 [2]堪萨斯州立大学电气和计算机工程系 [3]中国科学院信息工程研究所 [4]清华大学智能与网络化系统研究中心

出　　处：《自动化学报》2019年第1期5-24,共20页Acta Automatica Sinica

基　　金：国家重点研发计划(2016YFB0800202);国家自然科学基金(61472318;61632015;61772408;U1766215;U1736205);中央高校基本科研专项资金;霍英东教育基金会(151067)资助~~

摘　　要：信息物理融合系统(Cyber-physical system, CPS)是计算单元与物理对象在网络空间中高度集成交互形成的智能系统.信息系统与物理系统的融合在提升系统性能的同时,信息系统的信息安全威胁(Security)与物理系统的工程安全问题(Safety)相互影响,产生了新的综合安全问题,引入严重的安全隐患.本文介绍了CPS的概念与安全现状,给出了CPS综合安全的定义;在对现有安全事件进行分析的基础上,提出了CPS的综合安全威胁模型;从时间关联性和空间关联性的角度,对现有CPS攻击和防御方法进行了分类和总结,并探讨CPS综合安全的研究方向.Cyber-physical system(CPS)is an intelligent system consisting of computing units and physical objects that highly interact with each other through the network.The combination of cyber system and physical system is promoting the performance of the CPS.At the same time,it also introduces a new integrated security threat into CPS,which combines engineering safety threat of physical system and information security threat of cyber system.In this paper,concepts and security status of CPS are introduced,and the concept of CPS integrated security is deˉned.After analyzing several existing security accidents in CPS,a new threat model of CPS integrated security is proposed.Existing CPS attacks and defense methods are classiˉed and summarized from a perspective of temporal and spatial correlation.The future research of CPS integrated security is discussed.

关 键 词：信息物理融合系统 综合安全 威胁模型 综合防御 

分 类 号：TP202[自动化与计算机技术—检测技术与自动化装置] TP309[自动化与计算机技术—控制科学与工程]