基于攻击树的核电厂DCS系统信息安全脆弱性分析

随着计算机在核电仪控系统中的广泛运用,其信息安全问题受到越来越大的挑战.提出一种基于攻击树的核电仪控系统信息安全脆弱性分析方法,旨在对系统信息安全脆弱性进行量化分析.该方法首先给叶节点赋予三个不同属性,然后采用模糊层次分析法计算各攻击事件属性的权值.最后计算出叶节点、根节点及攻击路径发生概率.实际案例分析表明:计算得出的结果即给出了各节点和攻击路径发生的概率,还指出了攻击者最有可能采取的攻击路径,证明了该方法是合理可行的.基于攻击树的核电仪控系统信息安全脆弱性分析方法对系统管理者建设防御措施有积极的指导意义.

Information Security Vulnerability Analysis of DCS System in Nuclear Power Plant Based on Attack Tree

Computer is widely used in nuclear power instrumentation and control systems,its information security issues are increasingly challenged.In this essay,an information security vulnerability analysis method for nuclear power control system based on attack tree is proposed to analyze the vulnerability of the system information security.First,the leaf nodes are assigned three different attributes.Then the fuzzy analytic hierarchy process (FAHP) is applied to calculate the weights of the attributes of each attack.Finally,the probability of leaf node,root node and attack path are calculated.The actual case analysis shows that the calculated result gives the probability of each node and the attack path,and points out the attack path that the attacker is most likely to take,which proves that the method is reasonable and feasible.The information security vulnerability analysis method of nuclear power plant control system based on attack tree is of positive guidance to the system manager to build the defense measures.