Attack simulation method based on network threat intelligence in industrial Internet of Things

Abstract

The invention provides an attack simulation method based on network threat intelligence in an industrial internet of things, which comprises the following steps of: threat intelligence collection: carrying out web crawler on network threat intelligence information through a threat intelligence platform, and collecting the threat intelligence information; generating an attacker portrait: searching threat information of the attack organization, and generating the attacker portrait according to the threat information; acquiring an attack route: acquiring an overall architecture and a data flow diagram of a system environment for attack simulation, and screening out a suitable attack route; and attack simulation: constructing a meta-attack language model in combination with an attacker portrait, performing attack simulation on an attack line, and obtaining an experimental result for calculating time estimation of system damage. According to the invention, the problem of low integration level of threat intelligence and attack simulation technology is solved, and specific threats can be automatically evaluated, so that security personnel can quickly take positive measures, and the threat response capability and attack resistance capability of an industrial Internet of Things system are improved.

Description

technical field [0001] The invention relates to the technical field of industrial Internet of Things system security, in particular to an attack simulation method based on network threat intelligence in the Industrial Internet of Things. Background technique [0002] In recent years, the Industrial Internet of Things has developed rapidly and has great advantages in remote monitoring, information collection, and manpower reduction. Therefore, it has been widely used in IoT control scenarios such as smart grids and smart factories. But the Industrial Internet of Things is a complex network, and any failure or abnormality in one part of the system may cause huge damage to the entire system in a short period of time. However, attackers use the weak position of the industrial Internet of Things system to carry out network attacks, which will bring different degrees of economic losses to countries, enterprises, and individuals. Therefore, efficient assessment of threats to contr...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the technical problems of low integration, high cost and difficulty in security assessment of the existing attack simulation, the present invention proposes an attack simulation method based on network threat intelligence in the Industrial Internet of Things, which combines network threat intelligence with attack simulation, This improves the efficiency and accuracy of IIoT threat modeling and attack simulation

Images