工业互联网的安全态势自动感知方法研究  

Research on Automatic Security Situational Awareness Method for Industrial Internet

作　　者：张艾森 ZHANG Aisen(Shanghai Institute of Process Automation&Instrumentation Co.,Ltd.,Shanghai 200233,China)

机构地区：[1]上海工业自动化仪表研究院有限公司,上海200233

出　　处：《自动化仪表》2023年第5期37-41,共5页Process Automation Instrumentation

摘　　要：工业互联网安全态势分析过程中,并未对安全态势进行模糊推理,导致感知结果的平均逼近误差较高。因此,提出基于模糊推理的工业互联网安全态势自动感知方法。依据层次化结构,设计工业互联网检测模式,明确安全态势评估要素。按照滑动时间窗口方式,结合历史数据,建立模糊知识库。基于模糊推理原理,设计安全态势感知模型。结合网络安全态势评估要素,根据风险态势指数,实现工业互联网安全态势自动感知。为了验证该方法的实际应用效果,选取共包含12种常见攻击类型的340条攻击数据作为测试数据进行仿真试验,并与其他方法进行对比。试验结果表明,所提出的工业互联网自动感知方法应用后,与2种传统方法相比,网络安全态势感知结果的平均逼近误差分别降低了67%、83%。该方法极大地提升了工业互联网安全态势自动感知结果的准确性。The process of industrial Internet security posture analysis does not perform fuzzy reasoning on security posture,which leads to high average approximation error of perception results.Therefore,an automatic security situational awareness method of industrial Internet security posture based on fuzzy reasoning is proposed.Based on the hierarchical structure,the industrial Internet detection model is designed,and the security posture assessment elements are clarified.According to the sliding time window approach,the fuzzy knowledge base is established by combining historical data.Based on the principle of fuzzy reasoning,the security posture perception model is designed.Combined with the network security posture assessment elements,the automatic perception of industrial Internet security posture is realized according to the risk posture index.In order to verify the practical application effect of the method,a total of 340 attack data containing 12 common types of attacks are selected as test data for simulation tests and compared with other methods.The test results show that after the application of the proposed industrial Internet automatic security situational awareness method,the average approximation errors of the network security situational awareness results are reduced by 67%and 83%,respectively,compared with the 2 traditional methods.The method greatly improves the accuracy of the automatic industrial Internet security situational awareness results.

关 键 词：工业互联网 网络安全 态势感知 模糊推理 层次化结构 安全态势评估 模糊知识库 感知模型 

分 类 号：TH393[机械工程—机械制造及自动化]