本文選題：工業(yè)控制系統(tǒng) + 信息安全　； 參考：《華北電力大學(xué)(北京)》2014年碩士論文

【摘要】：隨著計(jì)算機(jī)技術(shù)的發(fā)展、通用開發(fā)標(biāo)準(zhǔn)和互聯(lián)網(wǎng)技術(shù)的廣泛使用,工業(yè)控制系統(tǒng)變得更加開放,同時(shí)也使得針對(duì)工業(yè)控制系統(tǒng)的攻擊大幅增長。工業(yè)控制系統(tǒng)安全事件頻發(fā),針對(duì)工業(yè)控制系統(tǒng)的攻擊手段日趨復(fù)雜和多樣化,造成的后果十分嚴(yán)重。工業(yè)控制系統(tǒng)作為國家戰(zhàn)略的重要組成部分,其信息安全問題尤為重要,因此很多國家都加快了工業(yè)控制系統(tǒng)信息安全防護(hù)的研究。入侵檢測(cè)技術(shù)作為有效防止工業(yè)控制系統(tǒng)受到攻擊的手段之一,也是當(dāng)今國內(nèi)外研究的前沿課題。本文分析了工業(yè)控制系統(tǒng)當(dāng)前的安全現(xiàn)狀,討論了工業(yè)控制系統(tǒng)存在的脆弱性和安全防護(hù)需求。在分析傳統(tǒng)入侵檢測(cè)方法的基礎(chǔ)上,剖析工業(yè)控制系統(tǒng)的入侵檢測(cè)系統(tǒng)的功能需求,進(jìn)行了面向工業(yè)控制系統(tǒng)入侵檢測(cè)系統(tǒng)的總體設(shè)計(jì)。本文提出一種面向工業(yè)控制系統(tǒng)的復(fù)合式入侵檢測(cè)系統(tǒng),該系統(tǒng)包含入侵檢測(cè)引擎、基于誤用檢測(cè)技術(shù)的入侵檢測(cè)模塊和基于異常檢測(cè)技術(shù)的入侵檢測(cè)模塊三部分,并對(duì)后兩個(gè)模塊進(jìn)行了詳細(xì)設(shè)計(jì)。最后本文針對(duì)智能變電站進(jìn)行了入侵檢測(cè)系統(tǒng)的典型部署和設(shè)計(jì),并進(jìn)行了基于智能變電站的DoS實(shí)驗(yàn),著重評(píng)估了復(fù)合式入侵檢測(cè)系統(tǒng)的漏報(bào)率和誤報(bào)率,以及準(zhǔn)確率,得到了良好的實(shí)驗(yàn)結(jié)果,通過實(shí)驗(yàn)驗(yàn)證了該系統(tǒng)的有效性。本文提出的工業(yè)控制系統(tǒng)的復(fù)合式入侵檢測(cè)系統(tǒng)可以對(duì)沒有強(qiáng)大計(jì)算能力和足夠內(nèi)存的系統(tǒng)進(jìn)行防護(hù),并且不影響原有系統(tǒng)的業(yè)務(wù)需求；在不影響被監(jiān)控系統(tǒng)的條件下,易于整合到原有系統(tǒng)中。
[Abstract]:With the development of computer technology and the wide use of general development standards and Internet technology, industrial control systems become more open, and attacks against industrial control systems increase dramatically. Industrial control system security incidents occur frequently, and the attack methods against industrial control system are becoming more and more complex and diversified, resulting in very serious consequences. As an important part of the national strategy, the information security of industrial control system is particularly important, so many countries have accelerated the research of information security protection of industrial control system. As one of the effective methods to prevent the industrial control system from being attacked, intrusion detection technology is also a frontier research topic at home and abroad. In this paper, the present security situation of industrial control system is analyzed, and the vulnerability of industrial control system and the requirement of safety protection are discussed. Based on the analysis of the traditional intrusion detection methods and the functional requirements of the industrial control system intrusion detection system, the overall design of the industrial control system oriented intrusion detection system is carried out. This paper presents a composite intrusion detection system for industrial control system. The system consists of three parts: intrusion detection engine, intrusion detection module based on misuse detection technology and intrusion detection module based on anomaly detection technology. The latter two modules are designed in detail. Finally, the typical deployment and design of intrusion detection system for intelligent substation are carried out, and the DoS experiment based on intelligent substation is carried out. The failure rate, false alarm rate and accuracy rate of composite intrusion detection system are evaluated emphatically. Good experimental results are obtained and the effectiveness of the system is verified by experiments. The composite intrusion detection system of the industrial control system proposed in this paper can protect the system without strong computing power and enough memory, and does not affect the business requirements of the original system. Easy to integrate into the original system.
【學(xué)位授予單位】：華北電力大學(xué)(北京)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08;TP273

【參考文獻(xiàn)】

相關(guān)期刊論文 前8條

1 于立業(yè);薛向榮;張?jiān)瀑F;趙永麗;趙華;蘆永明;張秀明;;工業(yè)控制系統(tǒng)信息安全解決方案[J];冶金自動(dòng)化;2013年01期

2 董澤;黃宇;韓璞;;量子遺傳算法優(yōu)化RBF神經(jīng)網(wǎng)絡(luò)及其在熱工辨識(shí)中的應(yīng)用[J];中國電機(jī)工程學(xué)報(bào);2008年17期

3 孫宗寶;孫名松;;基于核主成分提取和支持向量機(jī)的入侵檢測(cè)[J];信息技術(shù);2007年07期

4 張翔;胡昌振;劉勝航;唐成華;;基于支持向量機(jī)的網(wǎng)絡(luò)攻擊態(tài)勢(shì)預(yù)測(cè)技術(shù)研究[J];計(jì)算機(jī)工程;2007年11期

5 包潘晴;楊明福;;基于KPCA和SVM的網(wǎng)絡(luò)入侵檢測(cè)[J];計(jì)算機(jī)應(yīng)用與軟件;2006年02期

6 沈翠華,劉廣利,鄧乃揚(yáng);一種改進(jìn)的支持向量分類方法及其應(yīng)用[J];計(jì)算機(jī)工程;2005年08期

7 李輝,管曉宏,昝鑫,韓崇昭;基于支持向量機(jī)的網(wǎng)絡(luò)入侵檢測(cè)[J];計(jì)算機(jī)研究與發(fā)展;2003年06期

8 江虹,曾立波,胡繼明;優(yōu)化的BP神經(jīng)網(wǎng)絡(luò)分類器的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)工程與應(yīng)用;2001年05期

，

本文編號(hào)：1819077