Research On Cyber Security Problems And Countermeasures For Industrial Control System

Industrial control system is an important part of modern production process.It is directly related to the security,stability and economy of the production process.Internet combined with industrial automation is the general trend of China's manufacturing transformation and upgrading.In the process of China's manufacturing 2025,the possibilities of network attacks and damages caused by the vulnerabilities are rising rapidly.The cyber security of industrial control system has become increasingly prominent,which is a hot issue concerned by the whole world.The cyber security problems of industrial control system are mainly manifested in the following three aspects:(1)Network attack can be achieved through the connection with the information channel(such as the OPC interface)from the outside world.(2)The virus can be entered into the industrial control system by the software and hardware vendors' upgrade or technology maintenance channels.(3)The vulnerabilities of software and hardware constitute the risk of cyber security.The serious impacts on which these problems have are shown as follow:the bad communication may make the system lose control,tampering with data will lead to information distortion,the controller which is attacked will give error outputs or dangerous control instructions etc.therefore,research on the cyber security of industrial control system first should focus on the cyber security problems and risk assessment,and then the targeted countermeasures can be developed to monitor the abnormal states.It can make the risks and cyber security problems be exposed timely and create favorable conditions for managing the cyber security issues.In this paper,the research object is the Industrial Automation Platform(IAP)which has the characteristics of general controllers.The cyber security problems and countermeasures are studied from the risk assessment and abnormal state monitoring.In this paper,the comprehensive evaluation method is proposed by combining the fuzzy analytic hierarchy process and fuzzy comprehensive evaluation based on entropy weight.It may reduce the excessive subjectivity and empiric in the conventional methods and improve the objectivity and scientific nature.These methods are applied to the cyber security risk assessment of Industrial Automation Platform.In view of the complexity of the distributed software communication structure of the platform,the relationships among the various configuration software tools and control configuration software in controllers are studied,and the corresponding risk assessment model is established.Based on the data given by the development experts familiar with the IAP,Matlab software is used to calculate the model and the corresponding values of the risk factors can be obtained,which provides an important evidence for the research on the cyber security of the industrial control system.According to the assessment,an effective countermeasure called abnormal state detection system(ADS)is proposed in this paper.That is to make real time judgment about whether it is a network attack or the malicious damage through monitoring the change of the important data in the industrial control system.The monitoring contents which can reflect the state change in control system include the configuration files of the industrial control system,the instruction of the human-machine interface and the communication traffic with controller station.The relevant warning information and records can be given through the abnormity analysis software.The system is verified by the test of China information technology security evaluation center and the various indexes have reached the technical requirements.