时间触发以太网时钟同步协议攻击行为的性能评估方法  

Performance Evaluation Method of Attack Behavior of Clock Synchronization Protocol in Time-triggered Ethernet

作　　者：刘策越 郭宏[2] 张先国[1] LIU Ce-yue;GUO Hong;ZHANG Xian-guo(The 15th Research Institute of China Electronic Technology Group Corporation,Beijing 100083,China;School of Automation Science and Electrical Engineering,Beihang University,Beijing 100191,China)

机构地区：[1]中国电子科技集团公司第十五研究所,北京100083 [2]北京航空航天大学自动化科学与电气工程学院,北京100191

出　　处：《科学技术与工程》2020年第28期11698-11705,共8页Science Technology and Engineering

基　　金：国家重点研发计划(2016YFB0801400)。

摘　　要：时间触发以太网时钟同步协议的PCF(protocal control frames)是决定该网络能否正常工作的核心要素,一旦发生针对PCF帧的攻击行为,可能会导致整个时间触发以太网的时序错乱和瘫痪。为了更好地深入分析这种攻击行为,提出一种针对PCF帧的攻击行为的性能评估方法,可对攻击者能力和攻击造成的影响进行有效评估。首先以不同阶段的时钟同步过程为考量依据,对攻击行为的实施过程和造成的影响进行详细分析,建立针对PCF帧的攻击行为分类框架。然后对攻击行为的要素进行分析提取,并结合量化参数,推导出攻击行为性能量化的数学表述。最后通过典型示例,对提出的方法进行应用说明,结果表明,本文方法可以较为合理地对攻击效能进行评估。The protocal control frames(PCF)of clock synchronization protocol of time-triggered ethernet is the core element to determine whether the network can work normally.Once the attack against PCF frame occurs,the timing of Time-Triggered Ethernet may be disordered and paralyzed.In order to better analyze the attack behavior,a performance evaluation method was proposed,which could effectively assess the capabilities of attackers and the impact of attacks.Firstly,based on the different stages of clock synchronization process,the implementation process and impact of the attack were analyzed in detail,and the attack classification framework for PCF frame was established.Then,the elements of attack behavior were analyzed and extracted.Combined with the quantitative parameters,the quantitative mathematical expression of attack behavior performance was derived.Finally,a typical example was given to illustrate the application of the proposed method.The results show that the method can reasonably evaluate the attack effectiveness.

关 键 词：时间触发以太网 时钟同步协议 攻击行为 评估方法 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]