HRPDF: A Software-Based Heterogeneous Redundant Proactive Defense Framework for Programmable Logic Controller  

作　　者：Ke Liu Jing-Yi Wang Qiang Wei Zhen-Yong Zhang Jun Sun Rong-Kuan Ma Rui-Long Deng 

机构地区：[1]State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001,China [2]College of Control Science and Engineering,Zhejiang University,Hangzhou 310027,China [3]College of Computer Science and Technology,Guizhou University,Guiyang 550025,China [4]School of Information Systems,Singapore Management University,Singapore 689867,Singapore

出　　处：《Journal of Computer Science & Technology》2021年第6期1307-1324,共18页计算机科学技术学报（英文版）

基　　金：supported by the National Key Research and Development Program of China under Grant No.2020YFB2010900;the Fundamental Research Funds for the Central Universities(Zhejiang University NGICS Platform)of China under Grant No.TC190A449.

摘　　要：Programmable logic controllers(PLCs)play a critical role in many industrial control systems,yet face increasingly serious cyber threats.In this paper,we propose a novel PLC-compatible software-based defense mechanism,called Heterogeneous Redundant Proactive Defense Framework(HRPDF).We propose a heterogeneous PLC architecture in HRPDF,including multiple heterogeneous,equivalent,and synchronous runtimes,which can thwart multiple types of attacks against PLC without the need of external devices.To ensure the availability of PLC,we also design an inter-process communication algorithm that minimizes the overhead of HRPDF.We implement a prototype system of HRPDF and test it in a real-world PLC and an OpenPLC-based device,respectively.The results show that HRPDF can defend against multiple types of attacks with 10.22%additional CPU and 5.56%additional memory overhead,and about 0.6 ms additional time overhead.

关 键 词：industrial control system programmable logic controller proactive defense heterogeneous redundant architecture 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]