Security vulnerability assessment method, system and device for cigarette industry control system

Abstract

The invention provides a security vulnerability assessment method for a cigarette industry control system. The method comprises the steps of identifying data streams, and tagging data stream paths and stream directions of the data streams; classifying the data streams according to attributes of the data streams; analyzing an attack surface; judging whether the data streams have technical control measures corresponding to the data streams in the cigarette industry control system or not; if yes, judging whether equipment nodes on the data stream paths have security management measures corresponding to the equipment nodes or not; if yes, performing security vulnerability testing and analysis on key nodes on the data stream paths, performing statistics on security vulnerability points on the key nodes on the data stream paths, and compiling the security vulnerability points existent in the cigarette industry control system in a predetermined document format; and if the equipment nodes on the data stream paths do not have the security management measures corresponding to the equipment nodes, configuring the security management measures corresponding to the equipment nodes for the equipment nodes on the data stream paths, and if the data streams do not have the technical control measures corresponding to the data streams in the cigarette industry control system, configuring the technical control measures corresponding to the data streams for the data streams. According to the security vulnerability assessment method, the security vulnerability of the cigarette industry control system can be assessed more comprehensively and more accurately.

Description

technical field [0001] The invention belongs to the technical field of the cigarette industry, and relates to an assessment method and system, in particular to a security vulnerability assessment method, system and equipment of a cigarette industry control system. Background technique [0002] At present, China mainly adopts "GB / T 27921-2011 Risk Management Risk Assessment Technology" and "GB / T 26333-2010 Industrial Control Network Security Risk Assessment Specification" to carry out network security risk assessment and security risk management for industrial control systems. Network security risk assessment mainly involves asset identification and assessment, threat assessment, vulnerability assessment, and risk calculation. Vulnerability assessment requires active attack methods such as vulnerability scanning and penetration testing for detection and identification. There are no serious threats in traditional IT information systems. However, using the above methods for ind...

AI Technical Summary

Problems solved by technology

[0005] In view of the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide a security vulnerability assessment method, system and server of the cigarette industrial control system, which is used to solve the problem of high cost of establishing a simulation environment for the cigarette industrial control system in the prior art. , there is a big difference between the simulation environment and the real production environment, which leads to the problem of incomplete and inaccurate security vulnerability assessment

Images