The Analysis And Design Of Security Evaluation System For The Industrial Control System

With industry control system's more and more complex,safety demand is higher and higher.The traditional safety assessment system met the bottleneck,have already not satisfied the requirement of modern industrial safety assessment.The APT(Advanced Persistent Threat)attack,which has large scale,multi-side cooperation,well-organized and long-term attack,are the major pattern of ICS security attack.The traditional security assessment method can't met the need of ICS security assessment.ICS security norm is scarce which can't form a general system.Besides,the data is limited,the information is incomplete,and the objectivity is low.All of these issues lead to a hard implement on quantitative model of ICS security assessment.This thesis focuses on the shortcoming of ICS security assessment.The main works are as follows:(1)Make a compare for the ICS and the traditional information system security evaluation system.And find the difference of both,which lay a foundation for the back of the system design.Do a research for the model of information security,put forward the SCIAM security attribute model,and construct the framework of security evaluation index system on the basis of SCIAM.(2)Based on SCIAM security attribute model,by using the entropy weight method to obtain the weight of each index in the index system,and grey multiple attribute group decision making method is adopted to evaluate the results of quantitative analysis.To some extent,the work can eliminate safety assessment to review the influence of subjective factors in the process,and have a significance in practical engineering.(3)Combined with ICS security assessment criteria at home and abroad of the evaluation model and evaluation methods,give a design scheme of ICS security evaluation system,and analyse the scheme to ensure the feasibility and reliability of the scheme.Through the above rese arch,starting from the actual situation of industrial control security,make an analysis for each system module and have a innovation in theory.The work for industrial safety control system's design is of great significance for reference.