Industrial control information security risk assessment model based on distributed inspection

Abstract

The invention relates to the technical field of industrial control system information security, and discloses an industrial control information security risk assessment model based on distributed inspection, which comprises the following steps: S1, formulating an information security risk list according to a target to be assessed; S2, selecting a risk assessment method, wherein the risk assessmentmethod comprises a qualitative risk assessment method and a quantitative risk assessment method; and S3, on the basis of the information security risk list, obtaining an industrial control system communication data packet, analyzing the industrial control system communication data packet, obtaining system asset related elements, storing the system asset related elements to form an asset sample list, and collecting system asset information in a field random spot check and retrieval mode. The industrial control information security risk assessment model based on distributed inspection can solvethe problems that the inspection efficiency is reduced and the inspection accuracy is poor due to the fact that a large number of manual operation parts need to be carried out by workers in the inspection process at present.

Description

technical field [0001] The invention relates to the technical field of industrial control system information security, in particular to an industrial control information security risk assessment model based on distributed inspection. Background technique [0002] Industrial control systems (ICS for short) are widely used in my country's energy, municipal, chemical, transportation, water conservancy, national defense science and technology, food and drug, and equipment manufacturing industries. More than half of the important infrastructure related to the national economy and people's livelihood rely on ICS to achieve automated operations. ICS information security has become an important part of the national network security strategy. [0003] Since the "Stuxnet" incident in Iran in 2010, the country has issued and implemented a series of laws, regulations and policies related to industrial control information security risk assessment such as the "Network Security Law of the P...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the deficiencies of the prior art, the present invention provides an industrial control information security risk assessment model based on distributed inspection, which has the advantages of improving inspection efficiency and accuracy, and solves the problem that the current inspection process requires a large number of manual operations by staff. part, not only reduces the inspection efficiency, but also checks the poor accuracy of the problem