工业控制系统安全态势评估与预测方案  

Security situation assessment and prediction method for industrial control system

作　　者：石波 于然 陈志浩 朱健 SHI Bo;YU Ran;CHEN Zhi-Hao;ZHU Jian(Beijing Institute of Computer Technology and Application,Beijing 100854;Jiangsu Aerospace 706 Information Technology Co.,Ltd,Nanjing 210012)

机构地区：[1]北京计算机技术及应用研究所,北京100854 [2]江苏航天七零六信息科技有限公司,南京210012

出　　处：《信息安全研究》2022年第2期145-157,共13页Journal of Information Security Research

基　　金：国家重点研发计划项目(2018YFC0831400)。

摘　　要：针对工业控制系统安全防护缺乏动态防御、态势感知等手段的问题,结合工业控制系统业务固定的特点,提出了安全态势评估与预测框架,基于层次化分析法构建了安全态势度量模型,并对工业控制系统行为轮廓特征构建及提取、基于深度学习的安全攻击检测、基于大数据挖掘的安全事件分析等技术开展研究,进而实现基于信息融合的安全态势评估和基于统计学习理论的安全态势预测方法,并通过实验验证了安全态势评估与预测方法的有效性和准确性.Aiming at the problem that the security protection of industrial control systems lacks dynamic defense,situation awareness,and other means,combined with the characteristics of the fixed business of industrial control systems,this paper proposes the framework of security situation assessment and prediction.It constructs a security situation measurement model based on the analytic hierarchy process.Then,this paper studies the construction and extraction of behavior profile features of the industrial control systems,security attack detection based on deep learning,security event analysis based on big data mining and other technologies,and proposes security situation assessment based on information fusion and security situation prediction based on statistical learning theory.Finally,the validity and accuracy of the security situation assessment method are verified by experiments.

关 键 词：工业控制系统安全态势 层次化分析法 深度学习 多源信息融合 非线性时间序列预测 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]