工业控制系统安全仿真关键技术研究综述  

Review on Key Technologies of Industrial Control System Security Simulation

作　　者：王佰玲[1,2] 刘红日 张耀方[1,2] 吕思才 王子博 王启蒙 Wang Bailing;Liu Hongri;Zhang Yaofang;LüSicai;Wang Zibo;Wang Qimeng(Harbin Institute of Technology at Weihai School of Computer Science and Technology,Weihai 264209,China;Harbin Institute of Technology Research Institute of Cyberspace Security,Harbin 150001,China;Cyberspace Security Research Center,Peng Cheng Laboratory,Shenzhen 518000;Fengtai Technology(Beijing)Co.,LTD,Beijing 100097,China)

机构地区：[1]哈尔滨工业大学(威海)计算机科学与技术学院,山东威海264209 [2]哈尔滨工业大学网络空间安全研究院,黑龙江哈尔滨150001 [3]鹏城实验室网络空间安全研究中心,广东深圳518000 [4]烽台科技(北京)有限公司,北京100097

出　　处：《系统仿真学报》2021年第6期1466-1488,共23页Journal of System Simulation

基　　金：国家重点研发计划(2018YFB2004200)。

摘　　要：应对日益严峻的工业互联网安全问题,仿真技术成为网络攻防演练、安全事件追溯分析以及预研技术验证的重要支撑技术。在归纳三类典型的工业控制系统安全仿真平台研究的基础上,着重介绍工控靶场和工控蜜网的关键技术。综述了工控网络和工控组件虚拟化技术,以流量模拟和行为模拟主导的工控靶场构建技术,多个蜜罐互联下的工控蜜网的诱捕技术,以及数据采集和评估技术。最后,阐述工业控制系统安全仿真领域面临的挑战及未来发展趋势。In order to cope with the increasingly serious industrial internet security problems, simulation is viewed as a critical backboned technology for drilling of network attack and defense, tracking back and analyzing of security incidents, as well as validating of pre-research technology. On the basis of summarizing the studies of three types of typical industrial control system security simulation platform, the key technologies used in industrial control cyber range and industrial control honeynets are highlighted. Technologies are summarized, such as the virtualization technology of industrial control network and industrial control components, the construction technology of industrial control target field dominated by flow simulation and behavior simulation, the trapping technology of industrial control honeynet under the interconnection of multiple honeypots, and the data acquisition and evaluation technology. The challenges and future trends in the field of security simulation of industrial control systems are presented.

关 键 词：工业控制系统安全仿真 虚拟化 工控靶场 工控蜜网 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]