基于组合权重的工控系统安全形式化分析方法  

A Formal Analysis Method for Industrial Control System Safety Combining Analytic Hierarchy Process and Entropy Weighted Method

作　　者：顾兆军[1] 李怀民 丁磊 隋翯 GU Zhao-jun;LI Huai-min;DING Lei;SUI He(Information Security Evaluation Center,Civil Aviation University of China,Tianjin 300300,China;Sino-European Institute of Aviation Engineering,Civil Aviation University of China,Tianjin 300300,China;School of Aeronautical Engineering,Civil Aviation University of China,Tianjin 300300,China)

机构地区：[1]中国民航大学信息安全评测中心,天津300300 [2]中国民航大学中欧航空工程师学院,天津300300 [3]中国民航大学航空工程师学院,天津300300

出　　处：《计算机仿真》2022年第12期422-428,共7页Computer Simulation

基　　金：国家自然科学基金资助项目(61601467)。

摘　　要：为了提高工业控制系统脆弱性评估结果的准确性,提出一种层次分析法和熵权法相结合的工业控制系统安全形式化分析方法。先构造了系统的攻击防御树模型,结合防御树叶节点特点,构造模糊一致性矩阵以确定安全属性权重,同时采用熵权法计算叶节点在量化过程中各安全属性权重。结合两种方法获得的组合权重,计算出整个系统的脆弱性指数。以民航某机场供油自控系统为例,对其进行了基于该方法的脆弱性评估。结果表明,上述方法能有效提高评估结果的准确性,真实反映出系统的风险点,为系统的安全保障提供科学有效的指导。In order to improve the accuracy of the evaluation result of the vulnerability index for industrial control systems, this paper proposes a formal analysis method for industrial control system security combining Analytic Hierarchy Process and entropy weight method. Firstly, the attack defense tree model of a system was constructed and then based on the characteristics of the leaf nodes of this model, a fuzzy consistency matrix was constructed to determine the security attribute weights. Secondly, the entropy weight method was used to calculate the weight of each security attribute of the leaf node in the quantification process, and then the combined weights obtained by the two methods were used to calculate the vulnerability index of the entire system. Finally, this method was applied to an airport fuel supply automatic control system. The result shows that this method can effectively improve the accuracy of the vulnerability index assessment, which can reflect the system risk point and provide scientific and effective guidance for security protection.

关 键 词：层次分析法 熵权法 组合权重 工业控制系统 攻击防御树 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]