An Offensive And Defensive Training Platform For Industrial Control System Network Information Security

In today's society,the industrial control system industry is developing very rapidly.Industrial control systems are not only used in traditional industries such as steel,petroleum,and chemical industries,but also in agriculture,culture and entertainment and other industries.However,the rapid development of industrial control systems also brings crises.As industrial control systems are widely used,information security issues also follow.In recent years,the industrial control systems of various countries and regions in the world have been frequently attacked.Therefore,how to ensure the information security of industrial control systems has become the highlight of the information security field of all countries in the world.However,it is almost impossible to carry out attack and defense experiments in a real industrial environment,and the economic losses caused are even more immeasurable.Therefore,building an offensive and defensive exercise platform that can carry out industrial control system network information security has become a research hotspot.Based on the industrial control system,this article instantiates the control system composition and network topology structure of a thermal power generation company,simulates field equipment,and builds a control system composed of a control layer,a simulation layer,and a monitoring layer,which can be realized without affecting the normal production of the enterprise.Under the operating environment,carry out a series of research on offensive and defensive technologies of industrial network security such as attack and defense.The control layer selects three different types of PLC equipment to provide as many equipment as possible for the attack and defense exercise platform;the monitoring layer completes the functions of monitoring screen display and data transmission;the simulation layer completes the model's simulation and data information transmission and recording functions.At the same time,this platform provides a method of attack defense,which can use attack playback technology on the simulation platform to restore the attack effect.On the one hand,it can realize attack source tracing and strengthen enterprise security awareness;on the other hand,it can carry out security defense and active defense technology research.Finally,the research results on this offensive and defensive rehearsal platform were successfully applied to enterprises.Practice has shown that the method is feasible.At the same time,the research methods of this exercise platform can also be applied to the design of exercise platforms in other industrial control fields,making a contribution to ensuring the information security of industrial control systems.