基于多目标的无人值守工业控制系统安全策略协同决策  

Multi-objective cooperative decision-making of security and safety strategies for unattended industrial control system

作　　者：郭伟杰 刘璐[1] 杜鑫[1] 周纯杰[1,2] GUO Wei-jie;LIU Lu;DU Xin;ZHOU Chun-jie(School of Artificial Intelligence and Automation,Huazhong University of Sicience and Technology,Wuhan 430074,China;School of Cyber Science and Engineering,Huazhong University of Sicience and Technology,Wuhan 430074,China)

机构地区：[1]华中科技大学人工智能与自动化学院,武汉430074 [2]华中科技大学网络空间安全学院,武汉430074

出　　处：《控制与决策》2024年第11期3617-3627,共11页Control and Decision

基　　金：国家自然科学基金项目(62127808,62320106005)。

摘　　要：工业互联网的发展实现了工业生产的“少人化”“无人化”的同时也使得工业控制系统面临着更多的信息安全威胁.针对信息安全防护需求实现过程中信息安全策略与功能安全策略存在冲突以及无人值守工业控制系统现场端与监控端的安全策略决策目标存在冲突的问题,提出一种基于多目标的安全策略协同决策方法.通过设置安全策略协同规则实现信息安全策略与功能安全策略的协同,构建风险收益量化模型和冲突风险量化模型对安全策略的风险收益属性以及实施所增加的冲突风险进行量化,结合各现场端的可接受风险阈值,利用多目标优化算法实现无人值守工业控制系统现场端与监控端的协同决策.最后,以煤矿行业无人值守压风机控制系统为对象,通过仿真验证所提出方法的有效性.The development of industrial Internet has realized the“reduced manpower”and“unmanned”industrial production.At the same time,industrial control systems are also facing more information security threats.Aiming at the conflict between information security strategies and functional safety strategies and the conflict between the security and safety strategies decision objectives of the field end and the monitoring end of the unattended industrial control system in the implementation process of information security protection requirements,this paper proposes a multiple-objective collaborative decision method of security and safety strategies.The collaboration of information security strategies and functional safety strategies is realized by setting security and safety strategies collaboration rules.A risk return quantification model is constructed to quantify the risk return attributes of security and safety strategies and a conflict risk quantification model is constructed to quantify the increased conflict risk associated with implementing security and safety strategies.Combining the acceptable risk thresholds of each field end,a multi-objective optimization algorithm is used to achieve collaborative decision-making between the field end and the monitoring end of the unattended industrial control system.Finally,the effectiveness of the proposed method is verified through simulation using the unattended pressure fan control system in the coal mining industry.

关 键 词：无人值守工业控制系统 信息安全 功能安全 协同决策 多目标 风险控制 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]