结合石油炼化装置业务的跨域威胁图模型生成方法  

Cross-domain Threat Graph Model Generation Method Based on Petroleum Refining Plant Business

作　　者：曹祎杰 梁旭清 李亚辉[1] 杜鑫[1] 周纯杰[1] Cao Yijie

机构地区：[1]华中科技大学人工智能与自动化学院,湖北武汉430074

出　　处：《工业控制计算机》2023年第12期120-123,共4页Industrial Control Computer

摘　　要：针对信息物理系统信息域中业务相关数据篡改攻击产生的跨域威胁分析难题,提出了一种结合业务的跨域威胁图模型生成方法。通过结合业务流程数据交互模型构建、信息域攻击图生成及面向工艺过程的物理资产关联方法,实现对信息物理高度耦合的石油炼化装置业务数据流向、信息域攻击传播以及物理域级联影响的威胁建模,并最终通过业务数据将信息域攻击传播路径与物理域的生产级联影响进行关联,实现对跨域威胁图模型的生成。实验结果表明,该模型能够对石油炼化装置的跨域威胁进行有效建模,从而为分析跨域攻击威胁提供基础支撑。Aiming at the problem of cross-domain threat analysis caused by business-related data tampering attacks in the information domain of CPS,a cross-domain threat graph model generation method based on business is proposed in this paper.By combining the construction of business process data interaction model,information domain attack graph generation and process-oriented physical asset association method,the threat modeling of the business data flow,cyber domain attack propagation and physical domain cascade impact of petroleum refining plant with highly coupled cyber-physical coupling is constructed,and finally the information domain attack propagation path is associated with the production cascade impact of the physical domain through business data to realize the generation of cross-domain threat graph model.

关 键 词：石油炼化装置 业务流程建模 跨域威胁图模型 

分 类 号：TE96[石油与天然气工程—石油机械设备] TP393.08[自动化与计算机技术—计算机应用技术]