Industrial control information security assessment system and method based on partition and domain

Abstract

The present invention discloses a system and method for industrial control information security assessment based on partition and domain, which relates to the field of industrial control technology, and comprises an industrial control terminal for editing industrial control information; a simulation assessment module for receiving industrial control information and performing simulation; and industrial equipment for executing final industrial control information; the industrial control terminal generates a number of disguised industrial control information according to the simulation results of the simulation assessment module, and the industrial equipment sequentially screens, splits, compares and splices the received industrial control information and the disguised industrial control information to form the final industrial control information. In the process of processing the industrial control information or the disguised industrial control information, the risk of using the tampered industrial control information is reduced, so that even if the industrial control information or the disguised industrial control information is tampered with during the transmission process, the security of the final industrial control information can be guaranteed, thereby realizing the safe operation of the industrial equipment.

Description

Technical Field

[0001] The present invention relates to the field of industrial control technology, and in particular to an industrial control information security assessment system and method based on partitioning and domaining. Background Art

[0002] Industrial control information refers to the use of digital control instructions to control the operation of industrial equipment under the premise of industrial automation control. With the continuous development of the information age, the security of industrial control information has become a major problem;

[0003] In the prior art, before industrial equipment receives and executes industrial control information, the industrial control information is simulated by means of three-dimensional simulation, and the security of the industrial control information is determined based on the simulation results to ensure the accuracy of the industrial control information and the normal and safe operation of the industrial equipment;

[0004] However, the following issues still exist:

[0005] 1. After the simulation, when the industrial control information is sent directly from the simulation software to the industrial equipment, the industrial control information may be tampered with during the transmission process, affecting the normal and safe operation of the industrial equipment;

[0006] 2. The existing technology can only simulate and judge the operation of one industrial device after receiving and executing industrial control information at a time for the security assessment of industrial control information. It cannot guarantee the safety of the combined operation of each industrial device under the condition that each industrial device operates safely alone. If the combined operation of multiple industrial devices is simulated, the amount of calculation will increase, which will increase the burden on the system.

[0007] Therefore, people are in urgent need of an industrial control information security assessment system and method based on partitioning and domain to solve the above technical problems. Summary of the invention

[0008] The purpose of the present invention is to provide an industrial control information security assessment system and method based on partitioning and domain division to solve the problems raised in the prior art.

[0009] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: an industrial control information security assessment system based on partitioning and domaining, comprising an industrial control terminal for editing industrial control information;

[0010] A simulation evaluation module for receiving industrial control information and performing simulation; it can determine whether the industrial control information has been maliciously tampered with during the transmission process or whether there is a problem with the industrial control information itself, so as to make timely adjustments to the industrial control information according to the simulation results;

[0011] - Industrial equipment used to execute final industrial control information;

[0012] The industrial control terminal generates some disguised industrial control information according to the simulation results of the simulation evaluation module, and uses the disguised industrial control information to confuse the user and reduce the risk of tampering with the industrial control information. The industrial equipment screens, splits, compares and splices the received industrial control information and the disguised industrial control information in turn to form the final industrial control information.

[0013] According to the above technical solution, the simulation evaluation module sends the simulation results of the industrial control information to the industrial control terminal through the result feedback unit, so that it can be known whether the industrial control information is tampered with in the process of being sent to the simulation evaluation module, so as to take timely countermeasures;

[0014] The industrial control terminal includes an information disguise unit for selectively generating different amounts of disguised industrial control information according to the feedback result of the result feedback unit, so that different amounts of disguised industrial control information can be generated, thereby reducing the risk of industrial control information being tampered with during transmission;

[0015] An instruction sending unit for sending industrial control information edited by an industrial control terminal and disguised industrial control information.

[0016] According to the above technical solution, the industrial equipment includes an instruction screening unit for screening the industrial control information sent by the received simulation evaluation module and the disguised industrial control information sent by the instruction sending unit;

[0017] An interception and segmentation unit for splitting the filtered industrial control information and the disguised industrial control information, so that each piece of industrial control information or the disguised industrial control information can be split into several sub-information, which is convenient for mutual comparison and selection of tampered sub-information, so as to avoid the occurrence of safety accidents caused by the direct execution of tampered industrial control information by industrial equipment;

[0018] A comparison and selection unit for screening the sub-information split by the interception and segmentation unit, so that the tampered sub-information in the split sub-information can be confirmed by comparison, so that the risk of tampering in the reassembled industrial control information can be reduced, and the security of industrial equipment executing industrial control instructions can be improved;

[0019] A splicing and assembling unit is used to compare and recombine the sub-information screened by the selection unit, so that the final industrial control information can be formed. By recombining, the possibility of industrial control information being tampered with is reduced, making the command operation of industrial equipment safer.

[0020] According to the above technical solution, the simulation evaluation module includes an information splitting unit for splitting the industrial control information, so as to avoid the simulation evaluation module simulating the industrial control information of an entire production line, resulting in an increase in the amount of calculation, so that the system burden can be effectively reduced;

[0021] A separate simulation unit for simulating and splitting industrial control information;

[0022] A result saving unit for saving the simulation results of a separate simulation unit makes it convenient to use the simulation results of the previous industrial equipment as the simulation input of the next industrial equipment, so that the simulation of the industrial control information of an entire production line can be realized through separate simulation and combined simulation, so that a complete simulation can be achieved without increasing the system's computing power and load.

[0023] The industrial control information security assessment method based on partition and domain includes the following steps:

[0024] S1. The industrial control terminal edits the industrial control information and sends it to the simulation software for security assessment;

[0025] S2, the simulation software simulates the received industrial control information and feeds back the simulation results to the industrial control terminal;

[0026] S3, the industrial control terminal selectively generates different amounts of disguised industrial control information according to the feedback results;

[0027] S4, the industrial control terminal and the simulation software simultaneously send the disguised industrial control information and the industrial control information to the industrial equipment;

[0028] S5, the industrial equipment screens the received disguised industrial control information and industrial control information;

[0029] S6. The selected simulation industrial control information and industrial control information are segmented and compared, and different sub-information are re-selected and spliced ​​to form the final industrial control information.

[0030] According to the above technical solution, in S1-S2, after receiving the industrial control information, the simulation software uses the information splitting unit to split the industrial control information into several split industrial control information according to different industrial equipment, and uses a separate simulation unit to simulate the split industrial control information in sequence, and uses the result saving unit to save the simulation result of the previous split industrial control information as the input of the next split industrial control information simulation, and finally obtains the simulation result, and feeds the simulation result back to the industrial control terminal.

[0031] Through the above technical solution, the amount of calculation for simulating the industrial control information of the complete production line is reduced, and there is no need to fully simulate the industrial control information of the entire production line, thereby reducing the computing load of the system.

[0032] According to the above technical solution, in S3-S4, when the feedback simulation result shows that the industrial control information is abnormal, the information camouflage unit is used to generate N camouflaged industrial control information;

[0033] When the feedback simulation results show that there is no abnormality in the industrial control information, the information camouflage unit is used to generate M camouflaged industrial control information, where N>M;

[0034] The simulation evaluation module sends the simulated industrial control information to the industrial equipment, and the instruction sending unit also sends N or M fake industrial control information to the industrial equipment at the same time.

[0035] Through the above technical solution, the operational safety of industrial equipment can be effectively guaranteed.

[0036] According to the above technical solution, in S5, the industrial equipment receives each piece of industrial control information or disguised industrial control information at a receiving time point T. i 's marking;

[0037] The set of combined receiving time points T = {T1, T2, T3, ..., T n}, where n means that the industrial equipment has received n industrial control information or disguised industrial control information;

[0038] The instruction screening unit is used to screen industrial control information or disguised industrial control information according to the following formula:

[0039] T i j =|T i -T j |;

[0040] When T i j When <a, for T i and T j The corresponding industrial control information or disguised industrial control information is retained;

[0041] When T i j ≥a, for T i and T j The corresponding industrial control information or disguised industrial control information is questioned, where a represents the set difference threshold;

[0042] When P ≥ b, for T i or T j The corresponding industrial control information or disguised industrial control information is deleted, where P represents the number of times the industrial control information or disguised industrial control information is questioned, and b represents the set threshold.

[0043] Through the above technical solution, the industrial control information or disguised industrial control information received by the industrial equipment is screened according to time, which reduces the risk of the industrial equipment executing the tampered industrial control information and ensures the normal and safe operation of the industrial equipment.

[0044] According to the above technical solution, in S6, the received industrial control information or disguised industrial control information is split at the same position by using the interception segmentation unit, and the industrial control information or disguised industrial control information is split into m segments of sub-information, and the sub-information of the same segment of different industrial control information or disguised industrial control information is combined into a set Among them, m represents the mth sub-information, s represents a total of s industrial control information or disguised industrial control information;

[0045] According to the parameter information in the sub-information, a multi-dimensional rectangular coordinate system is established, and the parameter information is respectively attached to the multi-dimensional rectangular coordinate system;

[0046] Taking the origin of coordinates as the starting point and the coordinate point of the sub-information in the multidimensional rectangular coordinate system as the terminal, each sub-information is converted into a vector representation to obtain a vector set

[0047] Select at least one sub-information from the vector set of each sub-information;

[0048] The comparison and selection unit is used to perform comparison and selection according to the following formula:

[0049]

[0050] When there is When, from and Select a sub-information corresponding to a vector representation as the mth sub-information;

[0051] The selected m segments of information are spliced ​​together using a splicing assembly unit to form final industrial control information, and the industrial equipment executes the final industrial control information.

[0052] Through the above technical scheme, the industrial control information or disguised industrial control information is screened, split, compared and spliced ​​to form the final industrial control information. In the whole process, the tampered industrial information or disguised industrial control information is eliminated step by step, ensuring that the final industrial control information formed by the final splicing has no possibility of being tampered with, thereby improving the safety of industrial equipment operation.

[0053] Compared with the prior art, the present invention has the following beneficial effects:

[0054] 1. The present invention sequentially screens, splits, compares, and splices the received industrial control information and disguised industrial control information to form final industrial control information. In the process of processing the industrial control information or the disguised industrial control information, the risk of using tampered industrial control information is reduced, so that even if the industrial control information or the disguised industrial control information is tampered with during transmission, the security of the final industrial control information can be guaranteed, thereby achieving safe operation of industrial equipment.

[0055] 2. The present invention is provided with a simulation evaluation module, which makes it possible to split and simulate the industrial control information of the entire production line separately, and use the result of the previous simulation as the input of the next simulation, so that the simulation of the industrial control information of the entire production line can be realized through separate simulation and combined simulation, so as to achieve a complete simulation without increasing the system computing power and load. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 It is a schematic diagram of the principle of the industrial control information security assessment system and method based on partitioning and zoning of the present invention;

[0057] Figure 2 A schematic diagram of the connection relationship of the industrial control information security assessment system based on partitioning and zoning of the present invention;

[0058] Figure 3 The present invention is a schematic diagram of the steps of the industrial control information security assessment method based on zoning and domain. DETAILED DESCRIPTION

[0059] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0060] Embodiment 1: Figure 1-2 As shown, the industrial control information security assessment system based on partition and domain includes an industrial control terminal for editing industrial control information;

[0061] Specifically, the editing of industrial control information is performed by technicians on the industrial control terminal;

[0062] A simulation evaluation module for receiving industrial control information and performing simulation; it can determine whether the industrial control information has been maliciously tampered with during the transmission process or whether there is a problem with the industrial control information itself, so as to make timely adjustments to the industrial control information according to the simulation results;

[0063] - Industrial equipment used to execute final industrial control information;

[0064] Specifically, industrial equipment may be machines such as lathes, milling machines, grinders, planers, etc.;

[0065] The industrial control terminal generates some disguised industrial control information according to the simulation results of the simulation evaluation module, and uses the disguised industrial control information to confuse the user and reduce the risk of tampering with the industrial control information. The industrial equipment screens, splits, compares and splices the received industrial control information and the disguised industrial control information in turn to form the final industrial control information.

[0066] The simulation evaluation module sends the simulation results of the industrial control information to the industrial control terminal through the result feedback unit, so that it can be known whether the industrial control information has been tampered with in the process of being sent to the simulation evaluation module, so as to take timely countermeasures;

[0067] The industrial control terminal includes an information disguise unit for selectively generating different amounts of disguised industrial control information according to the feedback result of the result feedback unit. For example, if the feedback result shows that a safety accident occurred in the industrial control information during the simulation process, and the technicians judge that the industrial control information itself does not have a problem that causes the safety accident, then it can be judged that the industrial control information has been maliciously tampered with during the sending process;

[0068] Specifically, when the simulation results of the simulation software show that the industrial control information has not been tampered with, the information disguise unit generates a small amount of disguised industrial control information to prevent the industrial control information from being tampered with when it is sent to the industrial equipment, and at the same time reduce the amount of calculation and processing of the industrial control information by the industrial equipment; when the simulation results of the simulation software show that the industrial control information has been tampered with, the information disguise unit generates a large amount of disguised industrial control information to reduce the possibility that the industrial control information executed by the industrial equipment is tampered with during the transmission process to the industrial equipment;

[0069] The content of the disguised industrial control information is exactly the same as that of the industrial control information, but the difference is in the transmission method, which plays a confusing role;

[0070] An instruction sending unit for sending industrial control information edited by an industrial control terminal and disguised industrial control information.

[0071] The industrial equipment includes an instruction screening unit for screening the industrial control information sent by the received simulation evaluation module and the disguised industrial control information sent by the instruction sending unit, the purpose of the screening is to screen out the industrial control information that may be maliciously tampered with, and improve the security of the industrial control information;

[0072] Specifically, the industrial equipment is screened according to the time sequence of receiving the industrial control information and the disguised industrial control information;

[0073] An interception and segmentation unit for splitting the filtered industrial control information and the disguised industrial control information, so that each piece of industrial control information or the disguised industrial control information can be split into several sub-information, which is convenient for mutual comparison and selection of tampered sub-information, so as to avoid the occurrence of safety accidents caused by the direct execution of tampered industrial control information by industrial equipment;

[0074] For example, the filtered industrial control information and the disguised industrial control information are divided into 80 sub-information segments in the same way;

[0075] A comparison and selection unit for screening the sub-information split by the interception and segmentation unit, so that the tampered sub-information in the split sub-information can be confirmed by comparison, so that the risk of tampering in the reassembled industrial control information can be reduced, and the security of industrial equipment executing industrial control instructions can be improved;

[0076] Specifically, during the comparison process, sub-information that is different from other sub-information is deleted, because during the splitting process, the industrial control information and the disguised industrial control information are split in the same way, that is, they are intercepted at the same position. If there is abnormal sub-information during the comparison process, then the abnormal sub-information is the tampered part;

[0077] A splicing and assembling unit is used to compare and recombine the sub-information screened by the selection unit, so that the final industrial control information can be formed. By recombining, the possibility of industrial control information being tampered with is reduced, making the command operation of industrial equipment safer.

[0078] The simulation evaluation module includes an information splitting unit for splitting the industrial control information, so as to avoid the simulation evaluation module simulating the industrial control information of an entire production line, resulting in an increase in the amount of calculation, so that the system burden can be effectively reduced;

[0079] Specifically, for the splitting of industrial control information, the industrial control information of different industrial equipment on the entire production line is split as a whole. For example, a production line includes a grinding machine tool, a drilling machine tool, and a polishing machine tool in sequence. When splitting the industrial control information, the industrial control information of the grinding machine tool is split out separately to form split industrial control information;

[0080] A separate simulation unit for simulating and splitting industrial control information, specifically, simulating the split industrial control information of each industrial equipment on the entire production line separately;

[0081] A result saving unit for saving the simulation results of a separate simulation unit makes it convenient to use the simulation results of the previous industrial equipment as the simulation input of the next industrial equipment, so that the simulation of the industrial control information of an entire production line can be realized through separate simulation and combined simulation, so that a complete simulation can be achieved without increasing the system's computing power and load.

[0082] Embodiment 2: Figure 1 and Figure 3 As shown, the industrial control information security assessment method based on partitioning and domaining includes the following steps:

[0083] S1. The industrial control terminal edits the industrial control information and sends it to the simulation software for security assessment;

[0084] S2, the simulation software simulates the received industrial control information and feeds back the simulation results to the industrial control terminal;

[0085] After receiving the industrial control information, the simulation software uses the information splitting unit to split the industrial control information into several split industrial control information according to different industrial equipment, uses a separate simulation unit to simulate the split industrial control information in sequence, and uses the result saving unit to save the simulation result of the previous split industrial control information as the input of the next split industrial control information simulation, finally obtains the simulation result, and feeds the simulation result back to the industrial control terminal.

[0086] S3, the industrial control terminal selectively generates different amounts of disguised industrial control information according to the feedback results;

[0087] S4, the industrial control terminal and the simulation software simultaneously send the disguised industrial control information and the industrial control information to the industrial equipment;

[0088] When the feedback simulation result shows that the industrial control information is abnormal, the information camouflage unit is used to generate N camouflaged industrial control information;

[0089] The purpose is to prevent the industrial control information from being tampered with during the process of being sent from the simulation evaluation module to the industrial equipment, and at the same time, not to increase the amount of calculation required by the industrial equipment to process the industrial control information and the disguised industrial control information;

[0090] When the feedback simulation results show that there is no abnormality in the industrial control information, the information camouflage unit is used to generate M camouflaged industrial control information, where N>M;

[0091] The purpose is to reduce the risk of industrial equipment executing tampered industrial control information. A large amount of fake industrial control information can play a role in confusion and disguise;

[0092] The simulation evaluation module sends the simulated industrial control information to the industrial equipment, and the instruction sending unit also sends N or M fake industrial control information to the industrial equipment at the same time.

[0093] S5, the industrial equipment screens the received disguised industrial control information and industrial control information;

[0094] Industrial equipment receives each piece of industrial control information or disguised industrial control information at the receiving time point T i The purpose of the marking is to filter according to the time point of receiving industrial control information or disguised industrial control information;

[0095] The set of combined receiving time points T = {T1, T2, T3, ..., T n}, where n means that the industrial equipment has received n industrial control information or disguised industrial control information;

[0096] The instruction screening unit is used to screen industrial control information or disguised industrial control information according to the following formula:

[0097] T i j =|T i -T j |;

[0098] When T i j When <a, for T i and T j The corresponding industrial control information or disguised industrial control information is retained;

[0099] When T i j ≥a, for T i and T j The corresponding industrial control information or disguised industrial control information is questioned, where a represents the set difference threshold;

[0100] Specifically, if there is T k If it is both a reservation and a challenge, then T k The corresponding industrial control information or disguised industrial control information is divided into questions, where k∈1,2,3,...,n, in order to reduce the possibility that the tampered industrial control information or disguised industrial control information is executed by industrial equipment;

[0101] When P ≥ b, for T i or T j The corresponding industrial control information or disguised industrial control information is deleted, where P represents the number of times the industrial control information or disguised industrial control information is questioned, and b represents the set threshold.

[0102] Specifically, b=(n-1)*c, where c represents the proportionality coefficient.

[0103] S6. The selected simulation industrial control information and industrial control information are segmented and compared, and different sub-information are re-selected and spliced ​​to form the final industrial control information.

[0104] The received industrial control information or disguised industrial control information is split at the same position by using the interception segmentation unit. The same position means splitting the industrial control information or disguised industrial control information at the same position, splitting the industrial control information or disguised industrial control information into m segments of sub-information, and combining the sub-information of the same segment of different industrial control information or disguised industrial control information into a set. Among them, m represents the mth sub-information, s represents a total of s industrial control information or disguised industrial control information;

[0105] According to the parameter information in the sub-information, a multi-dimensional rectangular coordinate system is established, and the parameter information is attached to the multi-dimensional rectangular coordinate system. For example, if there are three parameter information in the m-th sub-information, a three-dimensional rectangular coordinate system is established, and the three parameter information are attached to the three-dimensional rectangular coordinate system. Then, each sub-information will have a coordinate point in the three-dimensional rectangular coordinate system.

[0106] Taking the origin of coordinates as the starting point and the coordinate point of the sub-information in the multidimensional rectangular coordinate system as the terminal, each sub-information is converted into a vector representation to obtain a vector set

[0107] The split sub-information is converted into a vector representation, which makes it easy to compare the sub-information. Because the tampering of industrial control information is the tampering of parameter information, which leads to safety failures in the operation of industrial equipment. Therefore, the vector conversion of sub-information according to parameter information can reflect the situation of sub-information to the greatest extent.

[0108] Select at least one sub-information from the vector set of each sub-information;

[0109] The comparison and selection unit is used to perform comparison and selection according to the following formula:

[0110]

[0111] When there is When, from and Select a sub-information corresponding to a vector representation as the mth sub-information;

[0112] The selected m segments of information are spliced ​​together using a splicing assembly unit to form final industrial control information, and the industrial equipment executes the final industrial control information.

[0113] Embodiment three:

[0114] After receiving the industrial control information, the simulation software uses the information splitting unit to split the industrial control information into several split industrial control information according to different industrial equipment, uses a separate simulation unit to simulate the split industrial control information in sequence, and uses the result saving unit to save the simulation result of the previous split industrial control information as the input of the next split industrial control information simulation, finally obtains the simulation result, and feeds the simulation result back to the industrial control terminal.

[0115] The simulation results fed back show that the industrial control information is abnormal, and 10 fake industrial control information are generated using the information camouflage unit;

[0116] The simulation evaluation module sends the simulated industrial control information to the industrial equipment, and the instruction sending unit also sends 10 disguised industrial control information to the industrial equipment at the same time.

[0117] The time point T at which the industrial equipment receives the received industrial control information or the disguised industrial control information i 's marking;

[0118] The set of combined receiving time points T = {T1, T2, T3, ..., T 11}, where n=11 means that the industrial equipment received 11 industrial control information and disguised industrial control information;

[0119] The instruction screening unit is used to screen industrial control information or disguised industrial control information according to the following formula:

[0120] T i j =|T i -T j |;

[0121] When T i j When <a, for T i and T j The corresponding industrial control information or disguised industrial control information is retained;

[0122] When T i j ≥a, for T i and T j The corresponding industrial control information or disguised industrial control information is questioned, where a represents the set difference threshold;

[0123] When P ≥ b = 6, for T i or T j The corresponding industrial control information or disguised industrial control information is deleted, where P represents the number of times the industrial control information or disguised industrial control information is questioned, and b=(11-1)*0.6=6.

[0124] The interception segmentation unit is used to split the received industrial control information or disguised industrial control information at the same position, and the industrial control information or disguised industrial control information is split into 20 sub-information segments, and the sub-information of the same segment of different industrial control information or disguised industrial control information is combined into a set Among them, m=20 means the 20th sub-information, s=5 means there are 5 industrial control information and disguised industrial control information in total;

[0125] According to the parameter information in the sub-information, a multi-dimensional rectangular coordinate system is established, and the parameter information is respectively attached to the multi-dimensional rectangular coordinate system;

[0126] Taking the origin of coordinates as the starting point and the coordinate point of the sub-information in the multidimensional rectangular coordinate system as the terminal, each sub-information is converted into a vector representation to obtain a vector set

[0127] Select at least one sub-information from the vector set of each sub-information;

[0128] The comparison and selection unit is used to perform comparison and selection according to the following formula:

[0129]

[0130] When there is When, from and A sub-information corresponding to a vector representation is selected as the mth sub-information; at least 20 sub-information are selected in total.

[0131] The selected m segments of information are spliced ​​together using a splicing assembly unit to form final industrial control information, and the industrial equipment executes the final industrial control information.

[0132] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. The industrial control information security assessment method based on partition and domain is characterized by: The following steps are involved: S1. The industrial control terminal edits the industrial control information and sends it to the simulation software for security assessment; S2, the simulation software simulates the received industrial control information and feeds back the simulation results to the industrial control terminal; S3, the industrial control terminal selectively generates different amounts of disguised industrial control information according to the feedback results; S4, the industrial control terminal and the simulation software simultaneously send the disguised industrial control information and the industrial control information to the industrial equipment; S5, the industrial equipment screens the received disguised industrial control information and industrial control information; S6. The selected simulation industrial control information and industrial control information are segmented and compared, and different sub-information are re-selected and spliced ​​to form the final industrial control information.

2. The industrial control information security assessment method based on partitioning and domaining according to claim 1 is characterized in that: In S1-S2, after receiving the industrial control information, the simulation software uses the information splitting unit to split the industrial control information into several split industrial control information according to different industrial equipment, uses a separate simulation unit to simulate the split industrial control information in sequence, and uses the result saving unit to save the simulation result of the previous split industrial control information as the input of the next split industrial control information simulation, finally obtains the simulation result, and feeds the simulation result back to the industrial control terminal.

3. The industrial control information security assessment method based on partitioning and domaining according to claim 2 is characterized in that: In S3-S4, when the feedback simulation results show that the industrial control information is abnormal, the information camouflage unit is used to generate N camouflaged industrial control information; When the feedback simulation results show that there is no abnormality in the industrial control information, the information camouflage unit is used to generate M camouflaged industrial control information, where N>M; The simulation evaluation module sends the simulated industrial control information to the industrial equipment, and the instruction sending unit also sends N or M fake industrial control information to the industrial equipment at the same time.

4. The industrial control information security assessment method based on partitioning and zoning according to claim 3 is characterized in that: In S5, the industrial equipment receives each piece of industrial control information or disguised industrial control information at a receiving time point T i 's marking; The set of combined receiving time points T = {T1, T2, T3, ..., T n }, where n means that the industrial equipment has received n industrial control information or disguised industrial control information; The instruction screening unit is used to screen industrial control information or disguised industrial control information according to the following formula: when When T i and T j The corresponding industrial control information or disguised industrial control information is retained; when When T i and T j The corresponding industrial control information or disguised industrial control information is questioned, where a represents the set difference threshold; When P ≥ b, for T i or T j The corresponding industrial control information or disguised industrial control information is deleted, where P represents the number of times the industrial control information or disguised industrial control information is questioned, and b represents the set threshold.

5. The industrial control information security assessment method based on partitioning and zoning according to claim 4 is characterized in that: In S6, the received industrial control information or the disguised industrial control information is split at the same position by using the interception segmentation unit, and the industrial control information or the disguised industrial control information is split into m segments of sub-information, and the sub-information of the same segment of different industrial control information or disguised industrial control information is combined into a set Among them, m represents the mth sub-information, s represents a total of s industrial control information or disguised industrial control information; According to the parameter information in the sub-information, a multi-dimensional rectangular coordinate system is established, and the parameter information is respectively attached to the multi-dimensional rectangular coordinate system; Taking the origin of coordinates as the starting point and the coordinate point of the sub-information in the multidimensional rectangular coordinate system as the terminal, each sub-information is converted into a vector representation to obtain a vector set Select at least one sub-information from the vector set of each sub-information; The comparison and selection unit is used to perform comparison and selection according to the following formula: When there is When, from and Select a sub-information corresponding to a vector representation as the mth sub-information; The selected m segments of information are spliced ​​together using a splicing assembly unit to form final industrial control information, and the industrial equipment executes the final industrial control information.

6. An industrial control information security assessment system for implementing the industrial control information security assessment method based on partitioning and domaining as described in claim 1, characterized in that: It includes an industrial control terminal for editing industrial control information; A simulation evaluation module for receiving industrial control information and performing simulation; - Industrial equipment used to execute final industrial control information; The industrial control terminal generates a number of disguised industrial control information according to the simulation results of the simulation evaluation module, and the industrial equipment sequentially screens, splits, compares and splices the received industrial control information and the disguised industrial control information to form the final industrial control information.

7. The industrial control information security assessment system according to claim 6, characterized in that: The simulation evaluation module sends the simulation results of the industrial control information to the industrial control terminal through the result feedback unit; The industrial control terminal includes an information camouflage unit for selectively generating different amounts of camouflaged industrial control information according to the feedback result of the result feedback unit; An instruction sending unit for sending industrial control information edited by an industrial control terminal and disguised industrial control information.

8. The industrial control information security assessment system according to claim 7, characterized in that: The industrial equipment includes an instruction screening unit for screening the industrial control information sent by the received simulation evaluation module and the disguised industrial control information sent by the instruction sending unit; An interception and segmentation unit for splitting the filtered industrial control information and the disguised industrial control information; A comparison and selection unit for screening sub-information split by the interception and segmentation unit; A splicing assembly unit for comparing and reassembling sub-information screened by a selection unit.

9. The industrial control information security assessment system according to claim 8, characterized in that: The simulation evaluation module includes an information splitting unit for splitting industrial control information; A separate simulation unit for simulating and splitting industrial control information; A result saving unit for saving the simulation results of the individual simulation units.

Images