Unified risk quantitative evaluation method for instrument function security and information security strategies

Abstract

The invention discloses a unified risk quantitative evaluation method for instrument function security and information security strategies. The method specifically comprises the steps of establishing an instrument integrated causal failure model in combination with an attack tree and a fault tree; calculating the failure probability of each functional module of the instrument by analyzing the possibility of attack occurrence, the possibility of vulnerability utilization and the like; according to the attribute of the security policy, analyzing instrument security vulnerabilities capable of being relieved by instrument function security and information security policies and corresponding policy implementation effects; adding protection nodes in the instrument integrated causal failure model, and establishing an instrument security policy evaluation model; and performing expert scoring on each function module of the instrument, and performing quantitative evaluation on the instrument function safety and information safety strategy according to the change of the risk value before and after the implementation of the safety strategy. According to the method, a certain theoretical basis can be provided for deployment of the security policy in the instrument design process, and compared with qualitative evaluation in current various security standards, the accuracy is improved.

Description

technical field [0001] The invention belongs to the field of instrument safety protection, and more specifically relates to a unified risk quantitative evaluation method for instrument function safety and information security strategies. Background technique [0002] With the rapid development of microcomputer technology and network communication technology, intelligent instruments with functions of measurement, calculation, control, execution, communication, and diagnosis have been widely used in field equipment of industrial control systems. However, compared with traditional instruments, while smart instruments bring great convenience to production and operation, they also face threats such as increasing functional failure factors and accelerated penetration of information attacks. Therefore, there is an urgent need for functional safety and information security protection in smart meters. How to conduct an effective unified quantitative evaluation of instrument security...

AI Technical Summary

Problems solved by technology

The above methods all use qualitative methods to evaluate and describe the safety protection strategy, which lacks accuracy. At present, there is no evaluation method that can quantitatively evaluate the safety risk of the instrument

Images