半定量信息工业控制异构网络安全评估  

Semi-quantitative Information Industry Control Heterogeneous Network Security Assessment

作　　者：李世明[1] 张雨禾 王禹贺 杜军[1] 周国辉[1] 高丽 LI Shiming;ZHANG Yuhe;WANG Yuhe;DU Jun;ZHOU Guohui;GAO Li(College of Computer Science and Information Engineering,Harbin Normal University,Harbin 150025,China)

机构地区：[1]哈尔滨师范大学计算机科学与信息工程学院,哈尔滨150025

出　　处：《小型微型计算机系统》2024年第5期1218-1227,共10页Journal of Chinese Computer Systems

基　　金：黑龙江省高等学校科研项目(2021-KYYWF-0179)资助;黑龙江省自然科学基金项目(F2016030,F2018023)资助;河南省高等学校重点科研项目(21A413001)资助;哈尔滨师范大学计算机科学与信息工程学院科研项目(JKYKYZ202103)资助。

摘　　要：工业控制系统的异构性及其与互联网深度融合给工控系统安全评估带来精度不高等诸多问题.本文提出一种基于半定量信息的工业异构网络安全态势评估模型,该模型可以提高评估精度,解决难以描述不确定性信息和难以契合工控异构网络复杂结构等现存问题.该方法将工业控制网络划分为不同异构子网,根据子网特点选取有针对性的评估属性,并使用性能优秀的ER规则对不同类型的评估属性进行融合,可以有效利用定性知识和定量数据,获得更加准确的评估结果.在多个实际工业控制网络数据集上进行评估实验得到的结果表明:本文提出的模型与网络安全评估实际参考值的均方根误差值比RF、BP、SVM模型分别降低了80.2%、40.8%和87.7%,验证了该模型的有效性和准确性.The heterogeneity of industrial control system and its deep integration with internet bring numerous problems like low accuracy to the security assessment of industrial control systems.This paper proposes an industrial heterogeneous network security assessment model based on semi-quantitative information,which can improve the evaluation accuracy and solve existing problems such as difficult to describe uncertain information and difficulty to fit the complex structure of industrial control heterogeneous networks.This method divides industrial control networks into different heterogeneous sub-networks,selects targeted assessment attributes according to the characteristics of the sub-networks,and uses the excellent ER rules to fuse different types of assessment attributes,which can effectively use qualitative knowledge and quantitative data to obtain more accurate assessment results.The results of the assessment experiments on several practical industrial control network datasets show that the RMS error value between the proposed model and the network security assessment actual reference value are decreased by 80.2%,40.8%and 87.7%compared with the RF,BP and SVM models,respectively,verifying the effectiveness and accuracy of the model.

关 键 词：工业控制网络 半定量信息 安全评估 ER 异构网络 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]