CN111585968B

CN111585968B - Industrial control network security influence analysis device based on function analysis

Info

Publication number: CN111585968B
Application number: CN202010285431.2A
Authority: CN
Inventors: 郑威; 毛磊; 常箫; 张淑慧
Original assignee: Shanghai Nuclear Engineering Research and Design Institute Co Ltd
Current assignee: Shanghai Nuclear Engineering Research and Design Institute Co Ltd
Priority date: 2020-04-13
Filing date: 2020-04-13
Publication date: 2022-09-02
Anticipated expiration: 2040-04-13
Also published as: CN111585968A

Abstract

The invention discloses an industrial control network security impact analysis tool based on functional analysis, which is characterized by comprising the following modules: the system comprises a function decomposition module, a function topology generation module, an asset collection and analysis module, a network security attack analysis module and a function consequence influence evaluation module. Through an industrial control network security impact analysis tool based on function analysis, a function topological graph is generated, a hierarchical relation from functions to equipment is finally established, and the final actual impact of information security attack on a process system and the way of the impact of the information security attack on the process system are visually displayed.

Description

Industrial control network security influence analysis device based on function analysis

Technical Field

The invention belongs to the field of network security, and particularly relates to an industrial control network security impact analysis device based on function analysis.

Background

Since 2010 Stuxnet worm attacks the Iran nuclear facility, the information security problem of the industrial control system is highly emphasized by the international and domestic boundaries. Information security attacks can affect the availability, integrity and confidentiality of software and data, adversely affect the operation of systems, networks and related equipment, and pose a threat to industrial control systems. For information security attack, how to intuitively know the final influence of the information security attack on a process system is very important for system designers and system users, and by researching the actual influence of digital equipment influenced by the information security attack on the whole system process, the designers can more clearly know the vulnerability of the system and the link needing to focus on information security defense, so that the system users can fully evaluate the influence brought by the information security attack from events when facing the information security attack, and accordingly, targeted and effective measures are taken to deal with the situation.

Disclosure of Invention

The invention aims to provide an industrial control network security impact analysis device based on function analysis, and explains main modules and functions of the device.

An industrial control network security influence analysis device based on function analysis comprises the following modules: the system comprises a function decomposition module, a function topology generation module, an asset collection and analysis module, a network security attack analysis module and a function consequence influence evaluation module;

the function decomposition module analyzes the functions in a hierarchical structure and expresses the analyzed functions as a hierarchical structure of a target-means; evaluating the importance of the top layer function, providing a flow tool for functional decomposition to grade the top layer function layer by layer, and establishing a hierarchical relation from the function to the equipment;

the function topology generating module generates an intuitive function tree topology map by utilizing the analysis result of the function decomposition module and combining the correlation among the subfunctions; the function tree topological graph endows the function tree with logic calculation capacity, and whether the failure of each subfunction affects the execution of the final function can be judged;

the asset collection and analysis module establishes an interactive relation between a digital chemical engineering control system and controlled process equipment to form a set of the process equipment and associated sensors, actuators and controller assets;

the network security attack analysis module analyzes the asset attribute and the attack surface of the process equipment in the asset collection and analysis module to obtain a network attack graph and analyzes the influence of the network attack type possibly suffered on the equipment;

and the functional consequence influence evaluation module analyzes the influence of the subfunction on the target function according to the functional topology generation module to obtain the influence of the functional safety brought by the network safety attack.

The invention realizes the following functions:

(1) through the industrial control network security impact analysis device based on function analysis, a function topological graph is generated, and finally, a hierarchical relation from functions to equipment is established.

(2) Through the industrial control network security impact analysis device based on function analysis, the final actual impact of information security attack on the process system and the approach of the impact of the information security attack on the process system are visually displayed.

Drawings

FIG. 1 is a block diagram of an industrial control network security impact analysis device;

FIG. 2 is a hierarchical schematic of an object-measure.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in further detail below.

The invention analyzes the function of the process system in a hierarchical structure, and expresses the function as the hierarchical structure of the target-means. The hierarchical analysis starts from the top-level function, the top-level function is gradually decomposed to the process system for realizing the function, the subfunction of the process system is finally decomposed to the bottom-level process equipment for realizing the function, and thus the hierarchical relation of the function-subfunction-equipment is obtained. Then, by researching the interactive relation between the digital chemical engineering control system and the controlled process equipment, a set of the process equipment and the related digital chemical engineering control system assets is formed, and thus the incidence relation between the top-level function and the digital assets is obtained. And then, carrying out network security attack face analysis and attack path analysis on the digital assets, researching the influence degree of the network security attack events on the integrity, the availability and the confidentiality of the digital assets, combining a hierarchical functional structure, upwards deducing the influence of the network attack on the process equipment of the digital assets, and the influence on the sub-functions executed by the process equipment, and finally obtaining the influence on the top-level function.

The industrial control network safety influence analysis device based on function analysis comprises the following modules:

1) a functional decomposition module;

2) a functional topology generation module:

3) an asset collection and analysis module;

4) the network security attack analysis module:

5) the functional outcome affects the evaluation module.

The function decomposition module analyzes the functions in a hierarchical structure and expresses the analyzed functions as the hierarchical structure of the target-means. A high-level functional description is an overview of the integration of one system or multiple related systems. Thus, the underlying (i.e., more specific) subsystems or devices used to perform functions are targeted. The process of functional decomposition aims at distinguishing from the goal which underlying subsystems or devices can be used as means for achieving the goal from the top down. Further, by functional decomposition, means can be combined from the bottom up to discriminate the degree of influence of the means on achieving the object. Thus, the conclusion of functional decomposition is which subsystems and devices are available to perform a function, and which subsystems or components are necessarily involved in performing a function. Such a decomposition activity establishes a hierarchy of goal-means. The hierarchy of object-means is shown in FIG. 2

The top layer is the function, the second layer is the process system for accomplishing the function/goal, the third layer is the sub-functions of the respective systems implementing the top layer function, and the fourth layer is the equipment for each sub-function. In the function decomposition module, the importance of the top layer function is evaluated, a flow tool for function decomposition is provided, the top layer function is graded layer by layer, and finally, the hierarchical relation from the function to the equipment is established.

And the functional topology generating module generates an intuitive functional tree topology map by utilizing the analysis result of the functional decomposition module and combining the correlation relations among the subfunctions, such as series correlation, parallel relation and the like. Through the function tree topological graph and the logic calculation capacity of the function tree, whether the failure of each sub-function can affect the execution of the final function or not can be judged. For example, if the top-level function is completed by two redundant sub-functions, the loss of any one sub-function will not affect the implementation of the top-level function, and the two sub-functions belong to a parallel relationship; if two sub-functions are interdependent, the implementation of the top-level function can only be guaranteed if both sub-functions are executed correctly, and the two sub-functions belong to a serial association. Through the generation of the function tree topological graph, the influence on the top layer function caused by the failure of each sub-function can be calculated.

The asset collection and analysis module analyzes assets that perform sub-functions. The performance of the sub-functions generally depends on the proper operation of the process equipment, such as pumps, valves, fans, etc. The asset collecting and analyzing module establishes the interactive relation between the digital chemical engineering control system and the controlled process equipment to form a set of the process equipment such as a valve and the like and the associated assets such as a sensor, an actuator, a controller and the like. In addition, the network topology and the working process of the digital equipment are analyzed, for example, the communication and the dependency relationship among different equipment are analyzed, and the influence relationship diagram of the digital equipment is realized. Through the module, the incidence relation between the functions and the digitalized equipment of the industrial control system is realized.

And the network security attack analysis module analyzes the asset attribute and the attack surface of the digital equipment in the asset collection and analysis module to obtain a network attack graph and an attack path of the network attack to the equipment. And analyzes the impact that the type of network attack that may be sustained has on the device, which may include loss of integrity, confidentiality, and availability.

The function consequence influence evaluation module analyzes different influences of the network attack on the digital equipment according to the input of the network security attack analysis module, analyzes the influence degree of the process equipment such as a pump, a valve and the like which correctly executes the sub-functions after the digital equipment is subjected to the network attack according to the asset collection and analysis module, and finally analyzes the influence of the sub-functions on the target function according to the function topology generation module, thereby obtaining the influence of the function security brought by the network security attack.

The foregoing embodiments are merely illustrative of the principles and utilities of the present invention and are not intended to limit the invention. Any person skilled in the art can modify or change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Accordingly, it is intended that all equivalent modifications or changes which can be made by those skilled in the art without departing from the spirit and technical spirit of the present invention be covered by the claims of the present invention.

Claims

1. The utility model provides an industrial control network security influences analytical equipment based on functional analysis which characterized in that includes following module: the system comprises a function decomposition module, a function topology generation module, an asset collection and analysis module, a network security attack analysis module and a function consequence influence evaluation module;

the function decomposition module analyzes the functions in a hierarchical structure and expresses the analyzed functions as the hierarchical structure of the target-means; evaluating the importance of the top layer function, providing a flow tool for functional decomposition to grade the top layer function layer by layer, and establishing a hierarchical relation from the function to the equipment;

the function topology generation module generates a visual function tree topology graph by utilizing the analysis result of the function decomposition module and combining the correlation relationship among the subfunctions; the function tree logic computing capacity is given through the function tree topological graph, and whether the failure of each sub-function can affect the execution of the final function or not can be judged;

the network security attack analysis module analyzes the asset attribute and the attack surface of the process equipment in the asset collection and analysis module to obtain a network attack graph and analyze the influence of the network attack type possibly suffered on the equipment;