摘要:
工业控制系统除了应用于生产制造行业外，还广泛应用于交通、水利和电力等关键基础设施.随着工业数字化、网络化、智能化的推进，许多新技术应用于工业控制系统，提高了工业控制系统的智能化水平，但其也给工业控制系统的安全带来严峻的挑战.因此，工业控制系统的安全倍受研究人员的关注.为了让研究人员系统化地了解目前的研究进展，调研了近3年Web of Science核心数据库、EI数据库和CCF推荐网络与信息安全国际学术会议中发表的与工业控制系统安全相关论文以及其他相关的高水平研究工作.首先，介绍工业控制系统的体系结构及面临的威胁.然后，依据工业控制系统的体系结构，自上而下将其安全研究工作分为ICS-云平台通信安全、HMI-设备通信安全、设备固件安全以及其他安全研究，并从攻击和防御角度进行分析和整理.最后，提出当前工业控制系统安全研究依然面临的主要挑战，并指出未来研究发展的方向.
Abstract:
In addition to the application of manufacturing industries, industrial control systems are also widely used in critical infrastructure such as transportation, energy, and water treatment industries. Accelerated application of digital, network, and intelligent technologies in industrial control systems, more and more smart devices are connected to it, leading to severe challenges to its security. Therefore, the security of industrial control systems has attracted the attention of researchers. In order to let the researchers systematically understand the current research progress, we have researched the core database of Web of Science, EI database, the network and information security related papers of CCF recommended international academic conferences and other high-level research work in the past three years. First, the architecture of industrial control systems is introduced, then the security threats that ICS faces are introduced. Moreover, according to the architecture of the industrial control systems, we divide the security research work into three parts: the communication security of industrial control system and cloud, the communication security of human machine interface (HMI) to device, the security of device firmware and other security research issues, analyze them from the perspective of attack and defense. Finally, we put forward the main challenges that security research faces, identify open problems for future research directions.
百度学术
下载:
