基于动态故障树的信息物理融合系统风险分析  

Risk analysis of cyber-physical system based on dynamic fault trees

作　　者：徐丙凤[1] 钟志成 何高峰 XU Bingfeng;ZHONG Zhicheng;HE Gaofeng(College of Information Science and Technology,Nanjing Forestry University,Nanjing Jiangsu 210037,China;College of Internet of Things,Nanjing University of Posts and Telecommunications,Naiying Jiangsu 210003,China)

机构地区：[1]南京林业大学信息科学技术学院,南京210037 [2]南京邮电大学物联网学院,南京210003

出　　处：《计算机应用》2019年第6期1735-1741,共7页journal of Computer Applications

基　　金：国家自然科学基金青年科学基金资助项目(61802192,61702282);江苏省高等学校自然科学研究项目(18KJB520024,17KJB520023);南京林业大学校青年创新基金资助项目(CX2016026,GXL016);南京林业大学大学生创新训练计划项目(2018NFUSPITP475,2018NFUSPITP457);南京邮电大学引进人才科研启动基金资助项目(NY217143)~~

摘　　要：针对信息物理融合系统(CPS)中的网络安全攻击会导致系统失效的问题,提出一种基于动态故障树的CPS风险建模及分析方法。首先,对动态故障树和攻击树集成建模,构建攻击-动态故障树(Attack-DFTs)模型;然后,分别采用二元决策图和输入输出马尔可夫链给出攻击-动态故障树中的静态子树和动态子树的形式化模型,并在此基础上给出攻击-动态故障树的定性分析方法,即分析网络安全攻击导致系统失效的基本事件路径;最后,通过一个典型的排污系统应用实例对方法的有效性进行验证。案例分析结果表明,所提方法能够分析CPS中由于网络安全攻击导致系统失效的事件序列,有效实现了CPS的综合安全评估。In order to solve the problem that network security attacks against the Cyber-Physical System(CPS) will cause a system failure, a CPS risk modeling and analysis method based on dynamic fault tree was proposed. Firstly, the integrated modeling was performed to dynamic fault tree and dynamic attack tree to build the Attack-Dynamic Fault Trees(Attack-DFTs) model. Then, the formal models of static subtree and dynamic subtree in Attack-DFTs were given by binary decision graph and input-out Markov chain respectively. On this basis, the qualitative analysis method of Attack-DFTs was given to analyze the basic event path of the system failure caused by network security attacks. Finally, the effectiveness of the proposed method was verified by the typical case study of a pollution system. The case analysis results show that, the proposed method can analyze the event sequence of system failure caused by network security attack in CPS, and effectively realize the formal safety assessment of CPS.

关 键 词：信息物理融合系统 动态故障树 攻击树 风险分析 二元决策图 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]