工业控制设备安全测试技术

删除或更新信息，请邮件至freekaoyan#163.com(#换成@)

清华大学辅仁网/2017-07-07

工业控制设备安全测试技术

谢丰¹(

),彭勇¹,赵伟¹,高洋¹,王得金²,韩雪峰¹

2. 国际关系学院, 北京 100091

Security evaluation for industrial control devices

Feng XIE¹(

),Yong PENG¹,Wei ZHAO¹,Yang GAO¹,Dejing WANG²,Xuefeng HAN¹

1. China Information Technology Security Evaluation Center, Beijing 100085, China
2. University of International Relations, Beijing 100091, China

摘要:

HTML
输出: BibTeX | EndNote (RIS) 背景资料

文章导读

摘要工业控制设备(ICDs)广泛应用于石油化工、电力水利、轨道交通等国家关键基础设施领域,其正常运行直接关系到工业生产安全、经济安全甚至是国家安全。该文总结了现有工业控制设备普遍存在的共性安全问题,分析了其存在的根源。在此基础上从信息空间和物理空间这2方面分析了网络攻击带来的危害影响,最后总结了工业控制设备安全测试的标准规范、测评认证与面临的问题和挑战。

关键词 ：工业控制设备(ICDs),共性安全问题,信息空间,物理空间,安全测试

Abstract：Industrial control devices (ICDs) are widely used in many industrial facilities such as petrochemical factories, power generation plants, water treatment plants, and transportation systems. The cyber security of such devices directly affects industrial production, which affects our economic security as well as our national security. This paper describes common cyber security issues in these devices and the root causes of these issues. The effects of cyber attacks are also analyzed for attacks from the information space and the physical space connected to the ICDs. Finally, security evaluation techniques are given including standards, evaluation methods and certifications along with future research challenges.

Key words：industrial control devices (ICDs)controller security issues information space physical space security evaluation

收稿日期: 2013-12-01 出版日期: 2015-04-16

ZTFLH:

基金资助:国家科技重大专项资助项目 (2012ZX03002002)

引用本文:

谢丰, 彭勇, 赵伟, 高洋, 王得金, 韩雪峰. 工业控制设备安全测试技术[J]. 清华大学学报（自然科学版）, 2014, 54(1): 29-34.
Feng XIE, Yong PENG, Wei ZHAO, Yang GAO, Dejing WANG, Xuefeng HAN. Security evaluation for industrial control devices. Journal of Tsinghua University(Science and Technology), 2014, 54(1): 29-34.

链接本文:

http://jst.tsinghuajournals.com/CN/或 http://jst.tsinghuajournals.com/CN/Y2014/V54/I1/29

图表:

工控设备与信息空间和物理空间的连接示意图

针对工控设备的网络攻击

攻击类型	对信息空间影响	对物理空间影响
A₁	▼	■
A₂	■	▼
A₃	□	■
A₄	□	■

网络攻击对信息空间和物理空间的影响

类型	机构	对象	级别	评估内容	依据	说明
				通信健壮性	自定义规范	支持TCP/IP, 覆盖链路层/网络层/传输层协议
EDSA	ISA	设备	三级	功能安全	自定义规范	涵盖访问控制、使用控制、数据完整性、数据保密性、数据流限制、事件响应、可用性7类
				软件开发安全	62443-4-1	涵盖软件开发的12个阶段
ACC	Wurldtect	设备	二级	通信健壮性	逐渐与EDSA保持一致	支持TCP/IP, 覆盖链路层/网络层/传输层协议
APC	Wurldtect	供应商	三级	实践过程	WIB 2.0	对过程进行评估

工业控制设备测评认证对比表

参考文献:

[1]	Luders S. Stuxnet and the impact on accelerator control systems [C]// Proceedings of the 13th Conference on Accelerator and Large Experimental Physics Control Systems. Geneva, Switzerland: JACoW, 2011: 1285-1288.
[2]	Kube N, Yoo K, Hoffman D. Automated testing of industrial control devices: The Delphi database [C]// Proceedings of 6th IEEE/ACM International Workshop on Automation of Software Test. New York, USA: Association for Computing Machinery Press, 2011: 71-76.
[3]	彭勇, 江常青, 谢丰, 等. 工业控制系统信息安全研究进展 [J]. 清华大学学报: 自然科学版, 2012, 52(10): 1396-1408. PENG Yong, JIANG Changqing, XIE Feng. Industrial control system cyber security research[J]. Journal of Tsinghua University: Science & Technology, 2012, 52(10): 1396-1408.
[4]	IEC62443. Security for Industrial Automation and Control Systems[S]. Geneva, Switzerland: International Electrotechnical Commission, 2010.
[5]	ICS-CERT. Control system internet accessibility [Z/OL]. (2012-11-20), http://www.cs.unh.edu/~it666/reading_list/ Physical/cert_scada_shodan_alert.pdf.
[6]	Florian S, MA Zhengdong, Thomas B, et al.A survey on threats and vulnerabilities in smart metering infrastructures[J]. International Journal of Smart Grid and Clean Energy, 2012, 1(1): 22-28.
[7]	Sifferlin A. Wireless medical devices vulnerable to hacking [Z/OL]. (2013-04-22), http://www.toppatch.com/wp-content/uploads/2012/04/2012_Wireless-Medical-Devices-Vulnerable-to-Hacking-_-TIME.pdf.
[8]	Radcliffe J. Hacking medical devices for fun and insulin: Breaking the human SCADA system [Z/OL]. (2013-04-30), http://cs.uno.edu/~dbilar/BH-US-2011/materials/Radcliffe/BH_US_11_Radcliffe_Hacking_Medical_Devices_WP.pdf.
[9]	National Institute of Standards and Technology. Guide to Industrial Control Systems (ICS) Security[M]. Gaithersburg, USA: NIST, 2011.
[10]	王中杰, 谢璐璐. 信息物理融合系统研究综述[J]. 自动化学报, 2011, 37(10): 1157-1166. WANG Zhongjie, XIE lulu. Cyber-physical systems: A survey[J]. Acta Automatica Sinica, 2011, 37(10): 1157-1166.
[11]	Rajkumar R, Lee I, Lui S, et al.Cyber-physical systems: The next computing revolution [C]// Proceedings of 47th Conference on Design Automation Conference. Piscataway, USA: IEEE Press, 2010: 731-736.
[12]	ANSI/ISA 99. Security forIndustrial Automation and Control Systems[S]. Research Triangle Park, USA: the International Society of Automation, 2007.
[13]	International Instrument User's Association. Process control domain-security requirements for vendors [Z/OL]. (2013-05-22), http://osgug.ucaiug.org/conformity/security/Shared%20Documents/WIB%20M2784%20PCS%20Vendor Security%20v2.pdf.
[14]	吴世忠. 信息安全测评认证的十年求索[J]. 信息安全与保密通信, 2007, 1(6): 5-8. WU Shizhong. Decade research of testing, evaluation and certification of information security[J]. Information Security and Communications Privacy, 2007, 1(6): 5-8.
[15]	冯登国. 信息安全测评理论与技术专辑前言[J]. 计算机学报, 2009, 32(4): 1-4. FENG Dengguo. The foreword of information security evaluation theory and techniques[J]. Chinese Journal of Computers, 2009, 32(4): 1-4.
[16]	ISA Security Compliance Institute. ISA secure embedded device security assurance certification [Z/OL]. (2013-05-11), http://www.isa.org/filestore/asci/isci/ISCI%20ISASecure%20ECSA%20Certification%20brochure.pdf.
[17]	Wurldtech Security Inc. Achilles practices certification [Z/OL]. (2013-03-15), http://www.wurldtech.com/product_services/certify_educate/achilles_practices_certification/.

[1]	王振波, 张君, 罗孙一鸣. 喷水法成型纤维网增强水泥基板材抗弯性能[J]. 清华大学学报（自然科学版）, 2014, 54(5): 551-555.
[2]	田志宏, 姜伟, 张宏莉. 一种支持犯罪重现的按需取证技术[J]. 清华大学学报（自然科学版）, 2014, 54(1): 20-28.
[3]	梁洪亮, 阳晓宇, 董钰, 张普含, 刘书昌. 并行化智能模糊测试[J]. 清华大学学报（自然科学版）, 2014, 54(1): 14-19.
[4]	李京哲, 梁彬, 游伟, 王鹏, 石文昌. 基于控制依赖分析的Android远程控制类恶意软件检测[J]. 清华大学学报（自然科学版）, 2014, 54(1): 8-13.
[5]	韩心慧, 肖祥全, 张建宇, 刘丙双, 张缘. 基于社交关系的DHT网络Sybil攻击防御[J]. 清华大学学报（自然科学版）, 2014, 54(1): 1-7.