A security impact analysis method for industrial control network based on functional analysis

Abstract

The invention discloses an industrial control network security impact analysis method based on function analysis, including function hierarchical modeling and function decomposition; building a function tree topology diagram; asset collection and analysis, associating functions and equipment; network security attack analysis; Impact assessment; generate a functional topology map and establish a hierarchical relationship from functions to equipment, thereby realizing the objective quantification of the importance of equipment information security; it can also analyze the final actual impact of information security attacks on the process system, as well as information security attacks on the process. The system affects the way, so as to realize the objective quantification of the information security risk degree.

Description

technical field

[0001] The invention belongs to the field of network security, in particular to an industrial control network security impact analysis method based on function analysis. Background technique

[0002] Since the Stuxnet worm attacked Iran's nuclear facilities in 2010, all circles at home and abroad have attached great importance to the information security of industrial control systems. Information security attacks will affect the availability, integrity and confidentiality of software and data, adversely affect the operation of systems, networks and related equipment, and pose a threat to industrial control systems. For information security attacks, how to intuitively understand the final impact of information security attacks on the process system is very important for system designers and system users. The designer has a clearer understanding of the vulnerabilities of the system and the links that need to focus on information security fortification, so that...

Images