Research And Application Of Industrial Control System Network Simulation Technology Based On Network Function Virtualization

The industrial control system testbed simulates the industrial production process and is widely used in production control optimization,planning and resource optimization,personnel training,safety assessment and safety testing research,etc.Existing physical copy testbeds and semi-physical testbeds that contain physical objects are expensive to build,and the scale of the testbed is far less than the scale of the actual system,which leads to certain limitations in related research based on the testbed;pure software simulation based on software union;This kind of test bed is not convenient to carry out related research and testing with high interaction requirements such as network attack and defense.In response to the above problems,this article studies the networked ICS(Networked ICS,NICS)simulation technology and network function virtualization(Network Functions Virtualization,NFV)on the basis of research on the NFV-based industrial control system network simulation technology,the main research content includes:(1)Research on NICS simulation synchronization technology.NICS sensors,actuators,and controllers have the characteristics of distributed deployment and functional coordination.Based on the analysis and research of distributed simulation technology,the problem of network message delay in multi-terminal collaborative simulation and its solutions are studied,the method of multi-terminal collaborative simulation synchronization is studied,and the synchronization network independent of the process production simulation network is designed for simulation synchronization.The method is to simulate the real-time network communication of industrial production in the process production simulation network,transfer the simulation calculation collaborative data in the synchronization network and keep the simulation synchronization,and use the industrial computer with multiple network cards to verify the simulation synchronization method.(2)Research on NICS simulation technology based on NFV.Generally,a complete and relatively independent module(process)realizes the NICS process production simulation model.If the sensors and actuators involved in the model have independent IP addresses,they can simulate industrial production among sensors,actuators,and controllers.Process control network communication,therefore,the process production simulation module needs to have multiple network cards,and the physical equipment such as industrial computer has a limited number of network cards,which is difficult to meet the process production simulation requirements with a large number of sensors and actuators.In view of the requirement of process production simulation module for multiple network cards,this paper studies the NFV technology of virtual network card,virtual switch and virtual network,and studies the implementation method of NICS simulation network based on NFV,and implements multiple Docker containers based on OVS-Docker design The method of adding network cards and network configuration,as well as the automatic networking method of Docker container based on Open v Switch,solves the key problems based on NFV simulation of NICS.(3)Chemical NICS network simulation based on chemical production process simulation.Based on the chemical production process simulation realized by the instructor team in the early stage,the NICS simulation method based on NFV studied in this paper is used to realize the chemical production process simulation based on Docker container;the multi-virtual network card of the container is used to realize the chemical production control system based on the container network Network simulation is to generate real-time network data flow combined with chemical production process control in the container network,provide industrial control network scenarios for network attack and defense,and establish a simulation synchronization network between the containers independent of the industrial control system simulation network.Related experimental test results show that the simulation synchronization method studied and implemented in this paper is beneficial to ensure the synchronization and smooth progress of process production process simulation,while avoiding or reducing the direct impact of Do S attack testing on process simulation;NICS simulation based on NFV,It is beneficial to realize a high-interaction industrial control system network testbed with the same scale and same complexity as the actual industrial control system.