Semi-passive industrial control network security analysis tool and method based on Bayesian attack graph

Abstract

The invention provides a Bayesian attack graph-based semi-passive industrial control network security analysis tool and a Bayesian attack graph-based semi-passive industrial control network security analysis method, which relate to the technical field of network security, and comprise a semi-passive information acquisition module for acquiring a combination of an active scanning report, network message data and administrator correction suggestions and taking the combination as an input file; an asset list establishing module: establishing an asset list, and generating. P files as input files of the attribute attack graph generation module and the Bayesian attack graph generation module; an attribute attack graph generation module which is used for inputting template network topology information and node information and generating an attack path; and a Bayesian attack graph generation module which is used for comprehensively analyzing the information of the whole network based on the network information and logic rules recorded by the Datalog statement, and finally generating all possible attack graphs. The method has high compatibility for an industrial control network, comprehensively utilizes multiple charts to visually assist network security analysis, and can achieve dynamic analysis and hidden danger prevention and control.

Description

Technical field[0001]The present invention relates to the field of network security, and in particular, to a half-dynamic industrial control network security analysis tool and method based on a Bayesian attack map.Background technique[0002]The industrial control system is a process control component that collects and monitors and monitors real-time data, and the business process control system for ensuring industrial facility automation, process control and monitoring, and its core components include data acquisition and Monitoring System (SCADA), Distributed Control System (DCS), Programmable Logic Controller (PLC), Remote Terminal (RTU), Intelligent Electronic Device (IED). Related terms: ICS (Industrial Controlsystem): Industrial Control System; AG (Attack Graph): Attack Diagram; BAG (Bayesian Attack Graphs): Bayes Attack Diagram; CVSS (Common Vulnerability Scoring System): General Vulnerability Score System.[0003]The industrial control system is widely used in power, petroleum p...

AI Technical Summary

Problems solved by technology

[0004] In view of the above-mentioned existing technologies, the existing industrial control network security analysis tools currently have problems such as lack of compatible design for industrial control networks, poor security analysis effect, and failure to prevent and control hidden dangers.

Images