CN106462137B - 用于保障工业控制系统的系统和方法 - Google Patents

用于保障工业控制系统的系统和方法 Download PDF

Info

Publication number
CN106462137B
CN106462137B CN201480070096.7A CN201480070096A CN106462137B CN 106462137 B CN106462137 B CN 106462137B CN 201480070096 A CN201480070096 A CN 201480070096A CN 106462137 B CN106462137 B CN 106462137B
Authority
CN
China
Prior art keywords
control logic
module
fpga
industrial
control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201480070096.7A
Other languages
English (en)
Chinese (zh)
Other versions
CN106462137A (zh
Inventor
T·L·普纳马勒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Westinghouse Electric Corp
Original Assignee
Westinghouse Electric Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Westinghouse Electric Corp filed Critical Westinghouse Electric Corp
Publication of CN106462137A publication Critical patent/CN106462137A/zh
Application granted granted Critical
Publication of CN106462137B publication Critical patent/CN106462137B/zh
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Programme-control systems
    • G05B19/02—Programme-control systems electric
    • G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/05—Programmable logic controllers, e.g. simulating logic interconnections of signals according to ladder diagrams or function charts
    • G05B19/058—Safety, monitoring
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/76—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/10—Plc systems
    • G05B2219/15—Plc structure of the system
    • G05B2219/15057—FPGA field programmable gate array
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24161—Use of key, in key is stored access level
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/30—Nc systems
    • G05B2219/34—Director, elements to supervisory
    • G05B2219/34024—Fpga fieldprogrammable gate arrays

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Automation & Control Theory (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Mathematical Physics (AREA)
  • Virology (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Programmable Controllers (AREA)
  • Stored Programmes (AREA)
  • Testing And Monitoring For Control Systems (AREA)
CN201480070096.7A 2013-12-20 2014-12-18 用于保障工业控制系统的系统和方法 Expired - Fee Related CN106462137B (zh)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
IN5962/CHE/2013 2013-12-20
IN5962CH2013 IN2013CH05962A (enExample) 2013-12-20 2014-12-18
PCT/IN2014/000783 WO2015092817A1 (en) 2013-12-20 2014-12-18 A system and method for securing an industrial control system

Publications (2)

Publication Number Publication Date
CN106462137A CN106462137A (zh) 2017-02-22
CN106462137B true CN106462137B (zh) 2019-04-30

Family

ID=52577881

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201480070096.7A Expired - Fee Related CN106462137B (zh) 2013-12-20 2014-12-18 用于保障工业控制系统的系统和方法

Country Status (6)

Country Link
EP (1) EP3084535B1 (enExample)
JP (2) JP2017506377A (enExample)
KR (1) KR102251600B1 (enExample)
CN (1) CN106462137B (enExample)
IN (1) IN2013CH05962A (enExample)
WO (1) WO2015092817A1 (enExample)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
IN2013CH05962A (enExample) * 2013-12-20 2015-06-26 Infotech Entpr Ltd
CN105187454B (zh) * 2015-10-22 2018-05-08 华北电力大学 一种电力工程设计数据传输与安全防护方法
JP6759572B2 (ja) * 2015-12-15 2020-09-23 横河電機株式会社 統合生産システム
JP6693114B2 (ja) * 2015-12-15 2020-05-13 横河電機株式会社 制御装置及び統合生産システム
US10417415B2 (en) 2016-12-06 2019-09-17 General Electric Company Automated attack localization and detection
EP3586203B1 (en) * 2017-03-24 2022-06-22 Siemens Aktiengesellschaft Resilient failover of industrial programmable logic controllers
JP6847755B2 (ja) * 2017-04-28 2021-03-24 三菱重工業株式会社 プラントの監視制御装置
DE102017214203A1 (de) 2017-08-15 2019-02-21 KSB SE & Co. KGaA Verfahren zum Schutz vor Kavitation bei Cyberangriffen und Einheit zur Durchführung des Verfahrens
US10551815B2 (en) * 2017-09-13 2020-02-04 Fisher-Rosemount Systems, Inc. Systems and methods for enhanced modular controller port to port communication
CN107966968A (zh) * 2017-11-23 2018-04-27 杭州和利时自动化有限公司 一种设备控制方法、系统及一种控制设备
CN109144016A (zh) * 2018-10-11 2019-01-04 常州信息职业技术学院 一种数据压缩下工业混杂传感网的感控系统与方法
EP3906445A1 (en) * 2018-12-31 2021-11-10 ABB Schweiz AG Method and system to generate control logic for performing industrial processes
CN111522306B (zh) * 2020-04-17 2021-07-13 盐城佳华塑料制品有限公司 一种智能控制的热合机生产机群
CN112016781B (zh) * 2020-04-27 2024-07-12 绿色动力环保集团股份有限公司 垃圾焚烧发电厂的生产运营小指标在线考评方法及系统
US11726440B2 (en) * 2020-07-01 2023-08-15 Honeywell International Inc. Industrial control system having multi-layered control logic execution
CN112558531A (zh) * 2020-12-29 2021-03-26 天津航天瑞莱科技有限公司 一种高温燃油试验台的智能控制系统
JP7763596B2 (ja) 2021-03-31 2025-11-04 三菱重工業株式会社 制御システムおよび制御方法
US11790081B2 (en) 2021-04-14 2023-10-17 General Electric Company Systems and methods for controlling an industrial asset in the presence of a cyber-attack
US12034741B2 (en) 2021-04-21 2024-07-09 Ge Infrastructure Technology Llc System and method for cyberattack detection in a wind turbine control system
KR102836752B1 (ko) * 2023-12-01 2025-07-21 한국원자력연구원 원자력발전소의 센서 신호의 사이버공격 탐지 방법 및 시스템

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002019064A3 (en) * 2000-09-01 2003-04-24 Conleth Buckley Method and system for preventing unwanted alterations of data and programs stored in a computer system
WO2006131317A1 (de) * 2005-06-07 2006-12-14 Contec Steuerungstechnik & Automation Gmbh Speicherprogrammierbare steuerung
CN202735877U (zh) * 2012-05-17 2013-02-13 上海核工程研究设计院 基于fpga和dsp控制器的核电厂数字化控制棒控制系统
CN102981431A (zh) * 2012-11-15 2013-03-20 国核自仪系统工程有限公司 基于fpga的核电站多样性保护系统硬件架构

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5911778A (en) * 1996-12-31 1999-06-15 Sun Microsystems, Inc. Processing system security
US6826434B1 (en) * 1998-07-31 2004-11-30 Soft Servo Systems, Inc. Computerized numerical control for a servomechanism
JP2003186689A (ja) * 2001-12-14 2003-07-04 Glory Ltd 貨幣処理機及び貨幣処理機におけるプログラム書換方法
JP2004213183A (ja) * 2002-12-27 2004-07-29 Mazda Motor Corp 制御用プログラムの作成支援プログラム、作成支援方法及び作成支援装置
AU2004273406A1 (en) * 2003-05-23 2005-03-24 Data Search Systems, Inc. Intelligent data storage and processing using FPGA devices
JP2005258996A (ja) * 2004-03-15 2005-09-22 Meidensha Corp Ｆｐｇａのリモートメンテナンス方式
US7149655B2 (en) * 2004-06-18 2006-12-12 General Electric Company Methods and apparatus for safety controls in industrial processes
US7298170B2 (en) * 2005-12-30 2007-11-20 Honeywell International Inc. Safety system based on reconfigurable array of logic gates
EP1982245B1 (en) * 2006-02-10 2014-04-02 Siemens Aktiengesellschaft Security key with instructions
DE112010005256T5 (de) * 2010-02-12 2013-05-02 Mitsubishi Electric Corporation Programmierbare Steuervorrichtung und Programmierapparatur
JP5689333B2 (ja) * 2011-02-15 2015-03-25 インターナショナル・ビジネス・マシーンズ・コーポレーションＩｎｔｅｒｎａｔｉｏｎａｌ Ｂｕｓｉｎｅｓｓ Ｍａｃｈｉｎｅｓ Ｃｏｒｐｏｒａｔｉｏｎ 異常検知システム、異常検知装置、異常検知方法、プログラムおよび記録媒体
IN2013CH05962A (enExample) * 2013-12-20 2015-06-26 Infotech Entpr Ltd

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002019064A3 (en) * 2000-09-01 2003-04-24 Conleth Buckley Method and system for preventing unwanted alterations of data and programs stored in a computer system
WO2006131317A1 (de) * 2005-06-07 2006-12-14 Contec Steuerungstechnik & Automation Gmbh Speicherprogrammierbare steuerung
CN202735877U (zh) * 2012-05-17 2013-02-13 上海核工程研究设计院 基于fpga和dsp控制器的核电厂数字化控制棒控制系统
CN102981431A (zh) * 2012-11-15 2013-03-20 国核自仪系统工程有限公司 基于fpga的核电站多样性保护系统硬件架构

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于ARM的嵌入式数控系统硬件平台设计;冯健;《中国优秀硕士学位论文全文数据库》;20130731;公开文本第2.2、4.1、5.1节，图2.7 *

Also Published As

Publication number Publication date
EP3084535B1 (en) 2019-01-16
WO2015092817A1 (en) 2015-06-25
JP2017506377A (ja) 2017-03-02
EP3084535A1 (en) 2016-10-26
CN106462137A (zh) 2017-02-22
JP2020064670A (ja) 2020-04-23
KR102251600B1 (ko) 2021-05-12
IN2013CH05962A (enExample) 2015-06-26
KR20160138374A (ko) 2016-12-05

Similar Documents

Publication Publication Date Title
CN106462137B (zh) 用于保障工业控制系统的系统和方法
US11689544B2 (en) Intrusion detection via semantic fuzzing and message provenance
Robles-Durazno et al. PLC memory attack detection and response in a clean water supply system
CN107817756A (zh) 网络化分布式数控系统靶场设计方法
McParland et al. Monitoring security of networked control systems: It's the physics
CN107544470B (zh) 一种基于白名单的控制器防护方法
US9245147B1 (en) State machine reference monitor for information system security
US10423151B2 (en) Controller architecture and systems and methods for implementing the same in a networked control system
WO2023064898A1 (en) Distributed automated response control networks and related systems and methods
Sangkhro et al. Cybersecurity in industrial control systems: A review of the current trends and challenges
Allison et al. PLC-based cyber-attack detection: A last line of defence
Li et al. CYDRES: CYber Defense and REsilient System for securing grid-interactive efficient buildings
Hernández Jiménez et al. Towards a cyber defense framework for scada systems based on power consumption monitoring
WO2020046432A2 (en) System architecture and method of processing data therein
Chiluvuri et al. Using heterogeneous computing to implement a trust isolated architecture for cyber-physical control systems
CN109407638A (zh) 基于fpga虚拟dcs的工业控制系统信息安全实现方法
EP2819053A1 (en) Diagnosing a device in an automation and control system
Ibrahim et al. Reinforcement learning-based attack graph analysis for wastewater treatment plant
EP3926429A1 (en) Control system
US20250291935A1 (en) Method, Apparatus and Device for Hardening Assets in OT System and Storage Medium and Computer Program Product
Sawada Model-based cybersecurity for control systems: Modeling, design and control
CN1281190A (zh) 单主板型网络安全电脑
Werth et al. A digital twin internal to a PLC to detect malicious commands and ladder logic that potentially cause safety violations
Ibrahim et al. Wastewater treatment plant security analysis
EP3979024A1 (en) Support device and setting program

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20190430