基于蜜罐的工控蜜网系统的设计与实现  

Design and implementation of honeynet based on honeypot for industrial control system

作　　者：李政达 周成胜 Li Zhengda;Zhou Chengsheng(National Computer System Engineering Research Institute of China,Beijing 100083,China;Institute of Security,China Academy of Information and Communications Technology,Beijing 100191,China)

机构地区：[1]华北计算机系统工程研究所,北京100083 [2]中国信息通信研究院安全研究所,北京100191

出　　处：《信息技术与网络安全》2020年第8期21-26,32,共7页Information Technology and Network Security

摘　　要：随着我国信息化和工业化融合不断深入,工业控制系统的网络安全就显得尤为重要。从主动防御现状、系统架构、实现方法等角度出发,介绍了针对工业控制系统设计的蜜网系统,并对其网络架构和关键技术进行了深入的分析,提出了适合在工控系统中使用的蜜网系统设计方案。通过设计符合工控行业实际情况的蜜网架构,在蜜网中部署传统蜜罐、PLC蜜罐、真实PLC设备以及通过高仿真等关键技术做到攻击诱捕,改变网络攻防博弈不对称局面,使企业运维人员面对威胁早发现早预防。With the deepening of the integration of information and industrialization in China,the network security of industrial control system is particularly important.This paper introduces the honeynet system designed for industrial control system from the perspectives of active defense status,system architecture and realization method,and deeply analyzes its network architecture and key technologies,proposes a honeynet system design scheme suitable for industrial control systems.By designing a honeynet architecture that conforms to the actual situation of the industrial control industry,deploying traditional honeypots,PLC honeypots,real PLC devices in honeynets and through key technologies such as high simulation to achieve attack and trap,the asymmetry situation of network offensive and defensive games can be changed,and the operation and maintenance personnel of enterprises can detect and prevent threats early.

关 键 词：工控安全 蜜网系统 蜜罐 网络安全 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]