工业信息物理系统漏洞节点的攻击图评估方法  

Attack Graph Evaluation Method for Vulnerable Nodes in Industrial Cyber Physical Systems

作　　者：周翔荣 孙子文 ZHOU Xiangrong;SUN Ziwen(Internet of Things Technology Application Engineering Research Center of the Ministry of Education,Jiangnan University,Wuxi 214122,China;School of Internet of Things Engineering,Jiangnan University,Wuxi 214122,China)

机构地区：[1]江南大学物联网技术应用教育部工程研究中心,江苏无锡214122 [2]江南大学物联网工程学院,江苏无锡214122

出　　处：《控制工程》2024年第12期2256-2263,共8页Control Engineering of China

基　　金：国家自然科学基金资助项目(61373126);中央高校基本科研业务费专项资金资助项目(JUSRP51510);江苏省自然科学基金资助项目(BK20131107)。

摘　　要：跨域信息攻击极大地影响了工业信息物理系统(industry cyber physical system,ICPS)的安全,为评估工业信息物理系统的漏洞节点,采用基于攻击图模型的最小成本分析法。首先,将系统中各个物理组件以及它们所具有的网络漏洞抽象为攻击图中的节点,根据各个物理组件的“与”“或”关系构建整个ICPS的“与”“或”攻击图,攻击图中节点的权重为攻击成本;然后,将整个攻击图的节点及权重转化为合取范式等价逻辑公式,采用多叉树剪枝策略求解最小攻击成本以及系统漏洞节点。通过MATLAB对废水发电厂模型进行仿真,以最小攻击成本得出废水发电厂模型的漏洞节点。Cross-domain information attacks greatly affect the security of industrial cyber-physical systems(ICPS).To evaluate the vulnerability nodes of ICPS,the minimum cost analysis method based on the attack graph model is adopted.Firstly,each physical component in the system and their network vulnerabilities are abstracted as nodes in the attack graph,and the“and”and“or”attack graph of the entire ICPS system is constructed according to the“and”and“or”relationship of each physical component with the weight of the node in the attack graph being the attack cost.Secondly,the nodes and weights of the entire attack graph are transformed into the equivalent logic formula of conjunctive normal form,and the multi-tree pruning strategy is used to solve the minimum attack cost and system vulnerability nodes.The wastewater power plant model is simulated by MATLAB,and the vulnerability nodes of the wastewater power plant model are obtained with the minimum attack cost.

关 键 词：工业信息物理系统 系统评估 节点攻击 最小攻击成本 漏洞节点 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]