ICS中虚假数据注入攻击研究  

FALSE DATA INJECTION ATTACK IN ICS

作　　者：宗学军 李鹏程 金琼 何戡 连莲 Zong Xuejun;Li Pengcheng;Jin Qiong;He Kan;Lian Lian(College of Information Engineering,Shenyang University of Chemical Technology,Shenyang 110142,Liaoning,China)

机构地区：[1]沈阳化工大学信息工程学院,辽宁沈阳110142

出　　处：《计算机应用与软件》2024年第2期322-327,共6页Computer Applications and Software

基　　金：2020年度辽宁省重点研发计划项目(2020JH2/10100035);2019年度“辽宁省高等学校创新团队及创新人才支持计划”项目(LT2019010)。

摘　　要：工业控制系统(Industrial Control System,ICS)的安全保障能力与其关乎国计民生的重要地位,具有极不协调的反差。为了揭示ICS潜在的攻击结构和方法,使得ICS防御策略研究更具实用性和针对性,将虚假数据注入(False Data Injection,FDI)攻击研究面向ICS,建立一种隐蔽的FDI攻击模型,可以在不影响ICS正常通信情况下注入虚假数据篡改监控变量。遵循该攻击模型,在煤制甲醇仿真工厂进行了验证实验,证明威胁切实存在,且难以察觉;同时,分析了威胁的严重性并讨论了防御措施。The security assurance capabilities of industrial control systems(ICS)have a very uncoordinated contrast with their important status related to national economy and people s livelihood.To reveal the potential attack structure and methods of ICS,aimed to make ICS defense strategy research more practical and targeted,the research on false data injection(FDI)attack was oriented towards ICS,a kind of covert FDI attack model was created.The false data could be injected in ICS to tamper monitoring variables without affecting the normal communication of ICS.Following the attack model,a verification experiment in the simulation factory of coal-to-methanol shows that the threat actually exists and is difficult to detect.At the same time,the seriousness of the threat is analyzed and the defense measures are discussed.

关 键 词：FDI攻击 工控协议 ARP欺骗 Ettercap WIRESHARK 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]