工业控制系统IDS技术研究综述  

An overview of intrusion detection systems in industrial control system

作　　者：严益鑫 邹春明[1] Yan Yixin;Zou Chunming(The Third Research Institute of Ministry of Public Security/Shanghai Engineering Research Center of Cyber and Information Security Evaluation,Shanghai 200031)

机构地区：[1]公安部第三研究所/上海网络与信息安全测评工程技术研究中心

出　　处：《网络空间安全》2019年第2期62-69,共8页Cyberspace Security

摘　　要：工业控制系统(Industrial Control System,ICS)作为工业大脑,与互联网连接的趋势越来越明显,但是开放的同时也暴露出严重的脆弱性问题。入侵检测作为重要的安全防御措施,能及时发现可能或潜在的入侵行为。论文从ICS网络安全现状及国家法律政策入手,首先介绍了ICS系统架构及其特点,给出了IDS入侵检测系统(Intrusion Detection System,IDS)的介绍,其次从误用入侵检测、异常入侵检测两个方面,对现有的ICS IDS的技术、算法的研究现状进行分析,最后针对当前ICS IDS的发展与应用现状,对整个ICS IDS的研究趋势进行了展望。As an industrial brain,the industrial control system(ICS)has become more and more open on the Internet.Therefore,the network security of industrial control systems has received more and more attention from the state.This paper starts with the current situation and national legal policy of ICS network security.Firstly,it introduces the architecture and characteristics of ICS system.Secondly,according to the two aspects of misuse intrusion detection and abnormal intrusion detection,this paper analyzes the current research status of ICS IDS technology and algorithm.Finally,the current development and application status of ICS IDS and research trend have been prospected.

关 键 词：工业控制系统 入侵检测系统 误用入侵检测 异常入侵检测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]