工业控制系统安全综述  

Survey of Industrial Control Systems Security

作　　者：杨婷 张嘉元 黄在起 陈禹劼 黄成龙 周威[4] 刘鹏 冯涛[3] 张玉清 Yang Ting;Zhang Jiayuan;Huang Zaiqi;Chen Yujie;Huang Chenglong;Zhou Wei;Liu Peng;Feng Tao;Zhang Yuqing(School of Cyber Engineering,Xidian University,Xi an 710071;National Computer Network Intrusion Protection Center,University of Chinese Academy of Sciences,Beijing 101408;School of Computer and Communication,Lanzhou University of Technology,Lanzhou 730050;School of Cyber Science and Engineering,Huazhong University of Science&Technology,Wuhan 430074;College of Information Sciences and Technology,Pennsylvania State University,State College,PA,USA 16802;School of Computer Science and Cyberspace Security,Hainan University,Haikou 570228)

机构地区：[1]西安电子科技大学网络与信息安全学院,西安710071 [2]中国科学院大学国家计算机网络入侵防范中心,北京101408 [3]兰州理工大学计算机与通信学院,兰州730050 [4]华中科技大学网络空间安全学院,武汉430074 [5]美国宾夕法尼亚州立大学信息科学与技术学院,美国宾夕法尼亚州斯泰特科利奇16802 [6]海南大学计算机与网络空间安全学院,海口570228

出　　处：《计算机研究与发展》2022年第5期1035-1053,共19页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(U1836210);国家重点研发计划项目(2018YFB0804701)。

摘　　要：工业控制系统除了应用于生产制造行业外,还广泛应用于交通、水利和电力等关键基础设施.随着工业数字化、网络化、智能化的推进,许多新技术应用于工业控制系统,提高了工业控制系统的智能化水平,但其也给工业控制系统的安全带来严峻的挑战.因此,工业控制系统的安全倍受研究人员的关注.为了让研究人员系统化地了解目前的研究进展,调研了近3年Web of Science核心数据库、EI数据库和CCF推荐网络与信息安全国际学术会议中发表的与工业控制系统安全相关论文以及其他相关的高水平研究工作.首先,介绍工业控制系统的体系结构及面临的威胁.然后,依据工业控制系统的体系结构,自上而下将其安全研究工作分为ICS-云平台通信安全、HMI-设备通信安全、设备固件安全以及其他安全研究,并从攻击和防御角度进行分析和整理.最后,提出当前工业控制系统安全研究依然面临的主要挑战,并指出未来研究发展的方向.In addition to the application of manufacturing industries,industrial control systems are also widely used in critical infrastructure such as transportation,energy,and water treatment industries.Accelerated application of digital,network,and intelligent technologies in industrial control systems,more and more smart devices are connected to it,leading to severe challenges to its security.Therefore,the security of industrial control systems has attracted the attention of researchers.In order to let the researchers systematically understand the current research progress,we have researched the core database of Web of Science,EI database,the network and information security related papers of CCF recommended international academic conferences and other high-level research work in the past three years.First,the architecture of industrial control systems is introduced,then the security threats that ICS faces are introduced.Moreover,according to the architecture of the industrial control systems,we divide the security research work into three parts:the communication security of industrial control system and cloud,the communication security of human machine interface(HMI)to device,the security of device firmware and other security research issues,analyze them from the perspective of attack and defense.Finally,we put forward the main challenges that security research faces,identify open problems for future research directions.

关 键 词：工业控制系统安全 工业4.0 工业物联网 攻击 防御 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]