A General Real-Time Control Approach of Intrusion Response for Industrial Automation Systems
A General Real-Time Control Approach of Intrusion Response for Industrial Automation Systems
复制标题
工业自动化系统入侵响应的通用实时控制方法
DOI：
10.1109/tsmc.2015.2469688
复制
发表时间：
2016
影响因子：
8.7
通讯作者：
Zhang, Qi
中科院分区：
文献类型：
--
作者：
Xiong, Naixue;Yang, Shuang-Hua;Qin, Yuanqing;Zhang, Qi
入侵响应是安全防护的重要组成部分。与IT系统相比，工业自动化系统（IAS）具有更高的实时性和可用性要求。入侵响应的实时安全策略执行是IAS入侵响应面临的挑战。安全策略执行不当会影响控制系统的正常运行，该安全策略造成的损失甚至可能超过网络攻击造成的损失。然而，现有的入侵响应研究主要集中在安全策略决策上，而忽视了安全策略的执行。本文提出了一种基于 IAS 中入侵响应表驱动调度的通用实时控制方法，以解决安全策略执行问题。安全策略由安全服务组组成，每种类型的安全服务都有一个实现任务集支持。多个任务集中的实现任务可以组合起来形成响应任务集。在所提出的方法中，首先，综合考虑安全性能和成本，通过非支配排序遗传算法（GA）II生成响应任务集。然后，通过集成调度方案重新配置系统，其中系统任务和响应任务基于遗传算法映射和调度在一起。此外，数值仿真和实际应用仿真结果表明，该方法能够及时执行安全策略，且对系统影响很小。
Intrusion response is a critical part of security protection. Compared with IT systems, industrial automation systems (IASs) have greater timeliness and availability demands. Real-time security policy enforcement of intrusion response is a challenge facing intrusion response for IASs. Inappropriate enforcement of the security policy can influence normal operation of the control system, and the loss caused by this security policy may even exceed that caused by cyberattacks. However, existing research about intrusion response focuses on security policy decisions and ignores security policy execution. This paper proposes a general, real-time control approach based on table-driven scheduling of intrusion response in IASs to address the problem of security policy execution. Security policy consists of a security service group, with each type of security service supported by a realization task set. Realization tasks from several task sets can be combined to form a response task set. In the proposed approach, first, a response task set is generated by a nondominated sorting genetic algorithm (GA) II with joint consideration of security performance and cost. Then, the system is reconfigured through an integrated scheduling scheme where system tasks and response tasks are mapped and scheduled together based on a GA. Furthermore, results from both numerical simulations and a real-application simulation show that the proposed method can implement the security policy in time with little effect on the system.
登录
查看更多内容
影响因子：
1.3
作者：
J. Stankovic;R. Rajkumar
通讯作者：
J. Stankovic;R. Rajkumar
DOI：
--
发表时间：
1999-02
期刊：
--
影响因子：
--
作者：
Winn Schwartau
通讯作者：
Winn Schwartau
影响因子：
2.2
作者：
Alcaraz, Cristina;Zeadally, Sherali
通讯作者：
Zeadally, Sherali
影响因子：
7.3
作者：
A. Girault;H. Kalla
通讯作者：
A. Girault;H. Kalla
影响因子：
4.8
作者：
Saurabh Amin;X. Litrico;S. Sastry;A. Bayen
通讯作者：
Saurabh Amin;X. Litrico;S. Sastry;A. Bayen