信息安全研究 ›› 2017, Vol. 3 ›› Issue (7): 624-632.

• 赛博物理系统(CPS) 专题 • 上一篇    下一篇

工业控制系统安全及异常检测研究进展

张凯一   

  1. 浙江工业大学计算机科学与技术学院杭州310023
  • 收稿日期:2017-07-19 出版日期:2017-07-15 发布日期:2017-07-18
  • 通讯作者: 张凯一

Research Survey on Industrial Control Systems Security and Intrusion Detection

  • Received:2017-07-19 Online:2017-07-15 Published:2017-07-18

摘要: 工业控制系统(industrial control system, ICS)是关键基础设施组成核心,随着计算机和网络技术的发展与工业化深度融合,工业控制系统正在逐步与互联网融合,打破了原有的密封性.融合推进的过程中也带来了病毒、木马等威胁,使工业控制系统面临日益严重的信息安全问题.从工业控制系统的结构、脆弱性、存在的威胁、异常检测4个方面介绍国内外工业控制安全研究的进展,并重点就安全异常检测方法进行评述,最后结合国内工业控制安全研究现状,对工业控制安全防护给出建议,并展望发展前景.

关键词: 工业控制系统, 数据监控与采集系统, 信息物理融合系统, 网络安全, 入侵检测

Abstract: Industrial control system (ICS) is the core of the infrastructure. With the development of computer internet and the integration of information and industrialization. industrial control system is gradually merging with internet, breaking the original hermetic. ICS suffers the threaten from virus, Trojans and others. For the above reasons, ICS is facing increasingly serious information security issues now. This paper introduces the progress of industrial control safety research at home and abroad from the aspects of structure. We explain structure, vulnerability, existing threat and anomaly detection of industrial control system. And focus on the analysis of anomaly detection methods. Finally, we combined with the domestic industrial safety, make recommendations on industrial safety, and prospects for development prospects.

Key words: industrial control system (ICS), supervisory control and data acquisition (SCADA), cyber-physical system (CPS), cyber security, intrusion detection