工业控制系统信息安全研究新动态

随着信息技术在工业控制系统(Industrial Control System,ICS)的广泛应用,工业控制系统从封闭系统逐步转化为开放互联系统,进而使工业控制系统面临信息技术带来的网络安全挑战.首先,本文借用ICS安全事件详细阐述了工业控制系统信息安全的现状;其次,重点介绍了工业控制系统架构和ICS信息安全与传统信息安全的差异;再次,从学术研究的角度,对2018年第五届ICS-CSR会议论文进行细致研究,从系统架构和通信协议两个方面对提出的安全解决方案进行分类和详细的分析.最后,根据会议中的安全解决方案和实际的安全需求,文章提出3个重点研究方向,分别为网络攻击模型、ICS仿真平台和非技术型人机界面.

New Developments of Information Security in Industrial Control Systems

As the widespread application of information technologies in Industrial Control System(ICS),ICSs have gradually transformed from closed systems to open and interconnected ones,encountering with the challenges to network security.This paper elaborates on the current situation of information security in ICS through security events.Then,it focuses on the ICS’s architecture and the differences between ICS information security and traditional network security.Moreover,it systematically analyzes the proceedings of the ICS&SCADA Cyber Security Research 2018(ICS-CSR 2018).Besides,it classifies and examines the proposed security solutions regarding the system architecture and communication protocols.Finally,drawing on the current solutions and in response to actual requirements,this paper summarizes three key directions:network attack models,the ICS’s simulation platforms,and the non-technical Human-Machine Interface(HMI)technology.