Industrial control information security risk assessment model based on distributed inspection

Abstract

The invention relates to the field of information security of an industrial control system, in particular to an industrial control information security risk assessment model based on distributed inspection. An inspection assessment model is constructed by combining industrial control network characteristics; system asset information is collected automatically to form an industrial control asset inspection list; and an asset object inspection model is formed automatically. According to the invention, industrial data are collected and automatic analysis is carried out on the data, and reductionanalysis is carried out on various industrial communication protocols, so that the asset information attributes of the industrial control system are fully and accurately identified; because of combination of the automatically and intelligently generated asset inspection object model with the distributed inspection evaluation implementation mode, the workload of inspection personnel is reduced andmanual and artificial misoperation and misjudgment are reduced, so that high-efficiency risk evaluation system architecture based on industrial control network characteristics is constructed.

Description

technical field [0001] The invention relates to the field of industrial control system information security, in particular to an industrial control information security risk assessment model based on distributed inspection. Background technique [0002] Industrial Control System (ICS) is widely used in my country's energy, municipal, chemical, transportation, water conservancy, national defense science and industry, food and medicine, and equipment manufacturing and other industries. More than half of the important infrastructure involving the national economy and people's livelihood relies on ICS to achieve automated operations. ICS information security has become an important part of the national cybersecurity strategy. [0003] Since the "Stuxnet" incident in Iran in 2010, the state has successively promulgated and implemented a series of laws, regulations and policies related to industrial control information security risk assessment, such as the Cybersecurity Law of the ...

AI Technical Summary

Problems solved by technology

[0004] At present, there are many industrial control inspection and evaluation tools on the market, but there are still many shortcomings and bottlenecks in the inspection process and inspection efficiency: First, most of the inspection tools are oriented to traditional information networks, and are made up of manual or scanning tools. The results of advanced technology and tool testing are used as the basis for evaluation and judgment, which cannot guarantee the safety, objectivity, and comparability of the results. When dealing with reports in various formats, there is no unified analysis and processing interface, or the interface processing is complicated and messy. A large amount of manual intervention is required in the processing work, which reduces the efficiency of detection and evaluation, and there are defects in the detection mode

Secondly, some of them are simply modified on the basis of traditional information security inspection and evaluation tool technology, and lack the characteristic design for industrial enterprises and industrial control systems.