Risk management methods, systems, equipment and media for integrated functions and information security

Abstract

The present invention provides a risk management method, system, equipment and medium that integrates functional and information security, and relates to the field of network information security technology, including: constructing multiple risk scenarios for enterprise production, business and information systems; conducting risk quantitative assessment on the information security and functional safety of the system, and then integrating the information security assessment results and the functional safety assessment results to obtain a dual-safety fusion risk quantitative index; generating a risk management strategy set based on the risk scenario according to the assessment results; according to the set risk management strategy automatic arrangement mechanism, calling different risk management strategies in the risk management strategy set for automatic arrangement, generating the arranged risk management strategy, and responding to the corresponding risks. The present invention comprehensively considers the integration of functional safety and information security, can respond to high-risk vulnerabilities as quickly as possible, and guarantees the dual security attributes of functional safety and information security to the greatest extent, and guarantees the functional safety and information security of production, business and information systems.

Description

Technical Field

[0001] The present invention relates to the field of network information security technology, and in particular to a risk management method, system, device and medium that integrates function and information security. Background Art

[0002] The production system, business system and information system of an enterprise are composed of various automated control components and process control components for real-time data collection and detection. Functional safety issues refer to production and operation accidents caused by internal functional failures (component aging, time decay). With the deep integration of industrialization and informatization, the production system, business system and information system of an enterprise are becoming open and have become the focus of cyber attacks by hackers and malicious organizations. In recent years, the number of security incidents in the production system, business system and information system of an enterprise has increased year by year, and security issues are no longer independent analysis of functional safety or information security. When conducting security analysis on the production system, business system and information system of an enterprise, functional safety and information security are not independent of each other to a certain extent, and there is a certain correlation.

[0003] For enterprise production systems, business systems and information systems, as well as risk assessment methods with relevant functional safety and information security integration, effective protection strategies need to be adopted after risk assessment to deal with functional safety and information security risk issues. The existing risk identification results and experience-based processing strategy library generate disposal strategies to solve enterprise production system, business system and information system risks through risk assessment indicators, and deploy relevant risk disposal strategies on the system to optimize security issues.

[0004] The current generation of risk management strategies has the following deficiencies: 1) Current risk management strategies are mostly based on risk results for strategy generation and response, and there is no feedback mechanism based on the whole process to optimize and evaluate the strategy, and the effectiveness of the strategy after deployment in the actual system and the risk defense effect are not considered. 2) For enterprise production systems, business systems and information systems, the current risk management strategies are mostly based on information security for strategy output, and there is no risk management strategy generation mechanism based on the integration of functional safety and information security, and the comprehensive impact of risk management measures on the integration of functional safety and information security and the conflict mechanism on both functional safety and information security are not considered. 3) The current risk management strategy does not consider the risk management strategy orchestration mechanism in the continuously running system, and does not consider the orchestration optimization and output of the risk management strategy for the integration and intersection of functional safety and information security when multiple or even more risks occur. Summary of the invention

[0005] In view of this, the embodiments of the present invention provide a risk management method, system, device and medium that integrates functional and information security, comprehensively considers the integration of functional safety and information security, can respond to high-risk vulnerabilities as quickly as possible, and ensure the dual security attributes of functional safety and information security to the greatest extent, thereby ensuring the functional safety and information security of enterprise production systems, business systems and information systems.

[0006] The embodiment of the present invention provides the following technical solution: a risk management method integrating functions and information security, comprising:

[0007] Construct various risk scenarios for enterprise production systems, business systems and information systems;

[0008] In each risk scenario, conduct risk quantitative assessments on the information security and functional safety of the enterprise's production systems, business systems, and information systems, respectively, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain dual-safety fusion risk quantitative indicators;

[0009] According to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual safety fusion risk quantitative index, an information security risk disposal strategy and a functional safety risk disposal strategy based on risk scenarios are generated, and a dual safety cross-fusion risk disposal strategy is generated after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, so as to obtain a risk disposal strategy set based on risk scenarios;

[0010] According to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual-safety fusion risk quantitative indicators in each risk scenario, in accordance with the set risk disposal strategy automatic orchestration mechanism, different risk disposal strategies are automatically orchestrated in the risk disposal strategy set based on the risk scenario, and the orchestrated risk disposal strategy is generated, and the corresponding risk is responded to through the orchestrated risk disposal strategy.

[0011] According to an embodiment of the present application, risk quantification assessment is performed on the information security and functional security of the enterprise production system, business system and information system respectively, including:

[0012] Under each of the risk scenarios, conduct a quantitative risk assessment of information security from the perspectives of asset level assessment, business level assessment, vulnerability level assessment, attack level assessment, and the information security impact results based on the risk scenario;

[0013] By adopting the asset function and business function failure node analysis algorithm, we comprehensively analyze the asset function safety failure degree and the business function safety failure degree in the enterprise production system, business system and information system, and then quantify the asset function safety failure degree and the business function safety failure degree through quantitative indicators to complete the quantitative risk assessment of functional safety.

[0014] According to an embodiment of the present application, the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results are integrated to obtain a dual-safety fusion risk quantitative index, including:

[0015] Comprehensively analyze the cross-integration risks of information security and functional safety, adopt the functional safety-information security dual-dimensional matrix, integrate the quantitative assessment results of information security risks and functional safety risks, and obtain the quantitative indicators of dual safety integration risks.

[0016] According to an embodiment of the present application, the method further includes:

[0017] Establishing risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies in the risk disposal strategy set;

[0018] Conduct influencing factor index analysis on the impact of all risk treatment strategies on functional safety, and establish the dual safety conflict impact factor index of the risk treatment strategy on information security and functional safety;

[0019] Establish the rationality index of the risk management strategy for the dual security conflicts of information security and functional safety;

[0020] The risk disposal strategy is evaluated and verified through the risk disposal strategy effectiveness evaluation index, the dual-safety conflict impact factor index and the dual-safety conflict rationality index.

[0021] According to an embodiment of the present application, risk treatment strategy effectiveness evaluation indicators are established for all risk treatment strategies in the risk treatment strategy set, including:

[0022] Based on the security recovery degree, risk disposal strategy effectiveness evaluation indicators are established for all risk disposal strategies respectively; wherein, the security recovery degree includes recovery time objective and recovery point objective; the recovery time objective is used to characterize the time after an attack occurs, when risk response disposal measures can make the system and data or business functions return to normal from suspension; the recovery point objective is used to characterize the normal point state to which risk response disposal measures can restore the system and data after a risk occurs.

[0023] According to an embodiment of the present application, establishing a rationality index of the risk management strategy for the dual security conflict of information security and functional safety includes:

[0024] Establish a code for the impact of the risk management strategy on the conflict between functional safety and information security, and establish a conflict code mechanism and conflict quantification indicators corresponding to the conflict code for the impact of different degrees of functional safety and information security conflicts.

[0025] According to an embodiment of the present application, the method further includes:

[0026] In the continuously running enterprise production system, business system and information system, respond to the corresponding risks through the arranged risk treatment strategy, and continuously monitor the effect of the risk response;

[0027] According to the monitoring results, feedback analysis is performed based on the risk disposal strategy effectiveness evaluation index, the dual-safety conflict impact factor index and the dual-safety conflict rationality index, and continuous feedback optimization is performed on the arranged risk disposal strategy.

[0028] According to an embodiment of the present application, the method further includes:

[0029] If the orchestrated risk disposal strategy does not meet the risk disposal strategy effectiveness evaluation index, or the dual-safety conflict impact factor index or the dual-safety conflict rationality index, the orchestrated risk disposal strategy is subjected to feedback closed-loop optimization based on the human-in-the-loop and human-on-the-loop automated strategy response mechanisms.

[0030] The present application also provides a risk management system integrating functions and information security, including:

[0031] Risk scenario building module, used to build various risk scenarios for enterprise production systems, business systems and information systems;

[0032] The risk indicator quantitative assessment module is used to conduct risk quantitative assessment on the information security and functional safety of the enterprise's production system, business system and information system in each risk scenario, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain dual safety fusion risk quantitative indicators;

[0033] A risk handling strategy generation module is used to generate an information security risk handling strategy and a functional safety risk handling strategy based on risk scenarios according to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual safety fusion risk quantitative index, and to generate a dual safety cross-fusion risk handling strategy after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, so as to obtain a risk handling strategy set based on risk scenarios;

[0034] The risk management module is used to automatically orchestrate different risk management strategies in the risk management strategy set based on the risk scenario according to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual-safety fusion risk quantitative indicators in each risk scenario, generate an orchestrated risk management strategy, and respond to corresponding risks through the orchestrated risk management strategy.

[0035] The present application also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned fusion function and information security risk management method when executing the computer program.

[0036] The present application also provides a computer-readable storage medium, which stores a computer program for executing the above-mentioned fusion function and information security risk management method.

[0037] Compared with the prior art, the beneficial effects that can be achieved by at least one of the above technical solutions adopted in the embodiments of this specification include at least the following: The embodiments of the present invention comprehensively consider the evaluation results of the quantitative risk indicators of functional safety and information security in the enterprise production system, business system and information system, establish a risk disposal strategy based on the two levels of functional safety and information security, respond to high-risk vulnerabilities as quickly as possible, and ensure the dual security attributes of functional safety and information security to the greatest extent. On the other hand, the embodiments of the present invention focus on the true effectiveness of the risk disposal strategy for functional safety and information security in the continuously running enterprise production system, business system and information system, analyze based on quantitative indicators and automatically arrange and optimize the strategy to ensure the functional safety and information security of the enterprise production system, business system and information system. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 It is a flowchart of a risk management method for integrating functions and information security according to the first embodiment of the present invention;

[0040] Figure 2 2 is a schematic flow chart of a dual security risk handling method according to a second embodiment of the present invention;

[0041] Figure 3 It is a schematic diagram of the process flow of the automatic arrangement mechanism of risk treatment strategies set in an embodiment of the present invention;

[0042] Figure 4 Schematic diagram of the risk management strategy optimization mechanism in an embodiment of the present invention;

[0043] Figure 5 is a schematic diagram of a risk management system for integrating functions and information security according to a first embodiment of the present invention;

[0044] Figure 6 is a schematic diagram of a risk management system for integrating functions and information security according to a second embodiment of the present invention;

[0045] Figure 7 It is a structural schematic diagram of the computer device of the present invention. DETAILED DESCRIPTION

[0046] The embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0047] The following describes the implementation methods of the present application through specific examples, and those skilled in the art can easily understand other advantages and effects of the present application from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The present application can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present application. It should be noted that, in the absence of conflict, the following embodiments and the features in the embodiments can be combined with each other. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work belong to the scope of protection of the present application.

[0048] The key terms in the embodiments of the present invention are defined as follows:

[0049] Functional safety: covers the safety attributes of functional representations at the enterprise production system, business system and information system levels.

[0050] Information security: covers the security attributes of network-related areas at the enterprise production system, business system and information system levels.

[0051] like Figure 1 As shown, an embodiment of the present invention provides a risk management method integrating functions and information security, including:

[0052] S101. Construct various risk scenarios for enterprise production systems, business systems and information systems;

[0053] S102. Under each of the risk scenarios, conduct risk quantitative assessments on the information security and functional safety of the enterprise's production system, business system, and information system, respectively, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain dual safety fusion risk quantitative indicators;

[0054] S103. Generate information security risk disposal strategies and functional safety risk disposal strategies based on risk scenarios according to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual safety fusion risk quantitative indicators, and generate dual safety cross-fusion risk disposal strategies based on risk scenarios after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, and obtain a risk disposal strategy set based on risk scenarios;

[0055] S104. According to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual-safety fusion risk quantitative indicators in each risk scenario, in accordance with the set risk disposal strategy automatic orchestration mechanism, different risk disposal strategies are automatically orchestrated in the risk disposal strategy set based on the risk scenario, and an orchestrated risk disposal strategy is generated, and a corresponding risk response is performed through the orchestrated risk disposal strategy.

[0056] The embodiment of the present invention is a risk management method for enterprise production systems, business systems and information systems based on the integration of functional safety and information security. It comprehensively considers the integration of functional safety and information security, provides quantitative functional safety and information security risk assessment results, and generates effective risk management strategies. In particular, it is aimed at the multi-risk management strategy arrangement mechanism in the continuous operation of enterprise production systems, business systems and information systems, as well as the optimization of risk management strategies under the integration of functional safety and information security, responds to high-risk vulnerabilities as quickly as possible, and guarantees the dual security attributes of functional safety and information security to the greatest extent.

[0057] When step S101 is implemented, the risk scenarios of the enterprise production system, business system and information system are constructed, which mainly includes: by reproducing and analyzing the typical risk scenarios existing in the enterprise production system, business system and information system, a variety of risk scenarios are constructed, including typical risk scenarios such as equipment discovery, data collection, damage process, malicious maintenance, disguise escape, instruction execution, remote control, etc. The risk scenario includes basic elements of specific risk scenarios such as assets, business, attack method, vulnerability, and risk impact results. For example, in the risk scenario of equipment discovery: the attacker uses the open port of the device to scan the asset through scanning, etc., obtains the specific information of the PLC in a certain network segment and the distribution of the PLC, causes the PLC function code to be called, and the equipment is out of control for a short time, including specific risk factors: the attack is a scanning attack by the attacker, the vulnerability is the open port of the device, the asset is the PLC, the business is the production control business, and the risk result is the PLC function code is called. In the future, the specific risk factor information will be identified and the quantitative level calculation of the factors will be performed one by one.

[0058] In a specific implementation of the present application, in step S102, the quantitative risk assessment of the dual safety of the enterprise's production system, business system and information system includes quantitative risk assessment of information security and functional safety. The information security and functional safety of the enterprise's production system, business system and information system are respectively quantitatively assessed, including:

[0059] In each of the risk scenarios, a quantitative risk assessment of information security is conducted from the perspectives of asset level assessment, business level assessment, vulnerability level assessment, attack level assessment, and information security impact results in the risk scenarios; an asset function and business function failure node analysis algorithm is used to comprehensively analyze the asset function safety failure degree and the business function safety failure degree in the enterprise production system, business system, and information system, and then the asset function safety failure degree and the business function safety failure degree are quantified through quantitative indicators, for example, asset and business function safety failure weight values ​​are assigned according to the node risk algorithm to complete the quantitative risk assessment of functional safety.

[0060] During the specific implementation, the information security and functional safety of the enterprise's production system, business system and information system are evaluated by risk quantification, including:

[0061] (1) Obtain asset data in the enterprise's production system, business system, and information system scenarios, and conduct quantitative assessment of asset levels.

[0062] (2) Obtain a business list of the enterprise's production system, business system, and information system, and conduct a quantitative assessment of the business level in the system.

[0063] (3) Identify and analyze the vulnerabilities in the enterprise's production systems, business systems, and information systems. At the same time, the vulnerabilities can be discovered and identified through vulnerability scanning tools such as vulnerability scanning, security scanning attacks, etc. Quantitatively evaluate the vulnerability level.

[0064] (4) Matching traffic alarm information with risk factor data. The received traffic alarm information includes basic attack alarm data, which is accurately matched with the asset list, business list, attack behavior, etc. through key basic attribute information. The traffic alarm information is fully connected with the assets, business, and attack data of the enterprise production system, business system, and information system. All elements in the risk scenarios of the specific enterprise production system, business system, and information system constructed by the system, including attacks, assets, businesses, etc., are used to accurately quantify the asset, business, vulnerability, and attack level of the actual system.

[0065] (5) After receiving traffic alarm information, we will identify and analyze attack behaviors and match them with the risk scenarios of the enterprise's production system, business system, and information system. We will identify and extract traffic characteristics of typical attack behaviors in the enterprise's production system, business system, and information system, match them with more than 100 intelligent network risk scenarios, and complete the evaluation results of information security quantitative indicators based on risk scenarios.

[0066] (6) Identification of functional safety impact results based on risk scenarios. After matching the traffic alarm information, a specific risk scenario is formed, which includes multiple information such as attack path, attack assets, and attack business, and the functional safety impact results caused by the attack in the risk scenario are identified. Through the node analysis algorithm, through the relationship between assets and businesses, the entire business assets, business systems, and production processes are covered. Taking assets as nodes, through qualitative analysis of functional safety impact results identification, and then through quantitative indicators, the asset functional safety failure rate is quantitatively evaluated. Taking the business as the baseline of functional safety, through qualitative analysis of functional safety impact results, and then through quantitative indicators to evaluate the business functional safety failure rate, and then complete the quantitative indicator evaluation results of functional safety based on risk scenarios.

[0067] In a specific implementation method of the present application, the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results are integrated to obtain a dual-safety fusion risk quantitative index, including: comprehensive analysis of the cross-integration risks of information security and functional safety, using a functional safety-information security dual-dimensional matrix, integrating the information security risk quantitative assessment results and the functional safety risk quantitative assessment results to obtain a dual-safety fusion risk quantitative index.

[0068] During the specific implementation, a comprehensive analysis is conducted on the cross-integration risks of information security and functional safety in enterprise production systems, business systems and information systems in actual application scenarios. The functional safety-information security dual-dimensional matrix algorithm is adopted to compare the quantitative risk indicators of information security and functional safety to obtain the "dual safety" fusion risk quantitative risk indicator. This result is used as the final risk measurement indicator. This result not only measures the independent size of functional safety risk and information security risk, but also intuitively analyzes the cross-integration between information security and functional safety.

[0069] In the specific implementation of step S103, this embodiment establishes a comprehensive risk disposal strategy based on the integration level of functional safety and information security for risk scenarios, covering disposal strategies for information security risks, functional safety risks and cross-integration risks. For example, the risk disposal strategy at the information security level is "offline attacked equipment"; the risk disposal strategy at the functional safety level is "re-check alarm equipment, troubleshoot (locate functional alarm equipment), protective shutdown (locate functional alarm equipment)"; when functional safety and information security risks exist at the same time, the risk disposal strategy is selected considering the risk strength. And establish the execution strength calibration value of the corresponding risk disposal strategy under the condition of considering functional safety and information security.

[0070] In a specific implementation of the present application, the method also includes: establishing risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies in the risk disposal strategy set; performing impact factor indicator analysis on the degree of influence of all risk disposal strategies on functional safety, and establishing dual safety conflict impact factor indicators for information security and functional safety of the risk disposal strategies; establishing dual safety conflict rationality indicators for information security and functional safety of the risk disposal strategies; and evaluating and verifying the risk disposal strategies through the risk disposal strategy effectiveness evaluation indicators, the dual safety conflict impact factor indicators and the dual safety conflict rationality indicators.

[0071] This embodiment comprehensively considers the integration level of functional safety and information security, considers the effectiveness of risk management strategies on functional safety and information security risks, and also considers the rationality of conflicts and severity of impacts of risk management measures on functional safety and information security.

[0072] When implementing it, Figure 2 As shown, this embodiment establishes an effectiveness evaluation index for the effectiveness of the above-mentioned risk disposal strategy in protecting against risks, which is used to measure the risk recovery effect of the strategy in the actual risk scenario, that is, to verify whether the risk response disposal strategy can successfully and / or effectively achieve the expected security protection. After the risk occurs, the risk response disposal measures should be able to prevent the risk from happening again, and at the same time enable the enterprise production system, business system and information system to recover to a certain normal range.

[0073] In one embodiment, based on the security recovery degree, risk disposal strategy effectiveness evaluation indicators are established for all risk disposal strategies; wherein, the security recovery degree includes the recovery time objective and the recovery point objective. This embodiment analyzes and evaluates from two dimensions. One is the recovery time objective (RTO), that is, after the attack occurs, the risk response disposal measures can make the system and data or business functions return to normal from suspension. The second is the recovery point objective (RPO), after the attack occurs, the risk response disposal measures can restore the system and data to the normal point state. Establish corresponding time scale nodes based on different scenarios or for specific enterprise production systems, business systems and information system indicator requirements. For example, within 5 minutes after the risk response disposal strategy is output, the system does not input attack information with the same source IP, attack type, and destination IP.

[0074] During the specific implementation, the functional safety and information security conflict impact factors of the risk disposal method are established, including: the severity of the impact of risk response measures on functional safety refers to the degree of influence of risk disposal measures taken after the risk behavior occurs on the normal functions of the enterprise's production system, business system and information system; the dual safety conflict impact factors are established from the functional operation of the relevant influencing entities after risk disposal, including system resource consumption, operation response time, whether a machine trip occurs, and the operation function of the overall production equipment; corresponding impact factor range nodes are established based on different or specific enterprise production system, business system and information system indicator requirements.

[0075] The impact of risk disposal methods on functional safety can be summarized as follows, including but not limited to: (1) response disposal measures cause industrial site shutdown or restart; (2) operation delays; (3) industrial control sites do not comply with regulations; (4) continuity is disrupted; (5) discrete processes have logical confusion and other functional safety issues. This embodiment adopts a reasonable avoidance or static execution strategy to analyze the impact factor of the risk response disposal measures on functional safety.

[0076] During specific implementation, the risk management method evaluates the rationality of functional safety and information security conflicts in quantitative indicators, including: dual safety rationality indicators are used to verify the safety of risk response and disposal strategies and their impact on functional safety, which are associated with specific business scenarios and industrial processes. In one embodiment, this embodiment establishes a code for the impact of risk response and disposal strategies on functional safety and information security conflicts, and establishes a conflict code mechanism and conflict quantitative indicators for corresponding conflict codes for different degrees of functional safety and information security conflict results. For example: within 30 seconds of the output of the risk response and disposal measures, the system does not input a single functional safety alarm information.

[0077] In the specific implementation of step S104, this embodiment integrates the disposal strategies under different risks, and calls different strategies to respond to the corresponding risks according to the risk assessment results. According to the requirements of the enterprise production system, business system and information system, it corresponds to different response demand indicators and performs continuous optimization calls. In this embodiment, a certain calling logic is followed, and optimization can be performed in different occasions. Figure 3 As shown, the risk disposal strategy automatic arrangement mechanism of this embodiment follows the following principles to generate risk disposal strategies:

[0078] (1) Prioritize risk scenarios with high risk indicators of dual safety and security, and implement all risk management strategies and measures.

[0079] (2) In risk scenarios where the quantitative risk indicators of both the safety and security are low and both the business level and asset level are low, "weak execution" shall be implemented first, and the risk management strategy shall not violate the conflict between the safety and security.

[0080] (3) In risk scenarios where the risk indicators of Shuang'an are low but the business level and asset level are high, all risk management strategies shall be implemented.

[0081] (4) For risk scenarios where the quantitative indicators of Shuang'an are low but the business level and asset level are moderate, "strong execution" will not be implemented for the time being and the risk disposal strategy of Shuang'an entry will not be violated.

[0082] Among them, the double safety quantitative risk indicators, business level indicators and asset level indicators can be established according to the requirements of the specific enterprise production system, business system and information system.

[0083] In a specific implementation of the present application, the method also includes: in a continuously running enterprise production system, business system and information system, responding to corresponding risks through the arranged risk management strategy, and continuously monitoring the effectiveness of the risk response; according to the monitoring results, feedback analysis is performed based on the risk management strategy effectiveness evaluation index, the dual-safety conflict impact factor index and the dual-safety conflict rationality index, and continuous feedback optimization is performed on the arranged risk management strategy.

[0084] This embodiment comprehensively considers the integration of functional safety and information security, generates effective risk management strategies based on the quantified functional safety and information security risk assessment results, implements a management strategy orchestration mechanism for multiple risks, and continuously monitors the effectiveness of management measures to optimize the management strategy generation process for the entire management strategy generation process. It can respond to high-risk vulnerabilities as quickly as possible, ensure the dual security attributes of functional safety and information security to the greatest extent, and ensure the functional safety and information security of production, business and information systems.

[0085] When implementing it, Figure 2As shown in FIG. 1 , this embodiment continuously monitors the effectiveness of risk response measures and provides risk feedback in continuously running enterprise production systems, business systems, and information systems. After the risk disposal strategy is generated, the risk disposal strategy is continuously optimized based on the effectiveness index, the functional safety and information security impact factor index, and the dual safety conflict index. The risk disposal strategy optimization mechanism is shown in FIG. Figure 4 As shown, follow the following principles:

[0086] (1) If the effectiveness evaluation index is violated, the system will automatically optimize the execution of the disposal strategy with "execution intensity calibration value" > the output risk response disposal strategy "execution intensity calibration value" to effectively respond to the same attack behavior, meet the effectiveness requirements, and prevent the attack behavior from continuing to occur.

[0087] (2) If the double safety conflict rationality index is violated, and the risk disposal strategy violates the double safety constraint rules, the system will automatically modify the "double safety conflict impact factor index" of the response disposal strategy, and add the original "double safety conflict impact factor index" + Modify the dual safety conflict impact factor index of the response and disposal strategy. If the response and disposal strategy causes a single functional safety alarm multiple times, when its "dual safety conflict impact factor index> ", the system will disable the risk response strategy. Establish corresponding indicators based on the requirements of the specific enterprise's production system, business system and information system.

[0088] in: Refers to the incremental correction factor when the strategy violates the dual safety constraint rule, which is used to expand the acceptance range of the dual safety constraint; It refers to the maximum acceptance factor when the strategy violates the dual-security constraint rules, and is set according to the system's acceptable dual-security conflict limit.

[0089] In a specific implementation of the present application, in order to improve the effectiveness and rationality of the system risk response and disposal strategy, the method also includes: This embodiment is based on the human-in-the-loop (HitL) and human-on-the-loop (HotL) automated strategy response mechanism, combined with the risk response and disposal strategy implementation verification indicators to form a feedback closed-loop optimization mechanism, comprehensively improve the adequacy of risk response disposal based on dual safety constraint rules and the comprehensive in-depth security protection mechanism, and improve the system's automated response and disposal capabilities.

[0090] In specific implementation, when the disposal strategy cannot meet the requirements of the above indicators, the disposal strategy is optimized in-loop (HitL). The system has a risk response disposal strategy library (usually a built-in risk disposal strategy). The system automatically sorts out the before and after output logic of the risk disposal strategy through risk scenario association, risk assessment analysis, and risk strategy arrangement. The system autonomously responds to generate the before and after logic of the risk disposal strategy and provides supporting evidence for the use of the risk disposal strategy to ensure that its risk response disposal strategy output meets the basic safety operation requirements. The system establishes a risk scenario library, a risk response disposal strategy library, and various associated evaluation indicators for the human-in-loop optimization process.

[0091] When the indicator requirements are still not met, the disposal strategy is optimized in the loop (HotL). The system autonomously executes all risk response disposal strategies, risk scenario matching, and risk scenario risk assessment operations. The operator reviews and analyzes all execution operation results, understands the accuracy of the before and after associations around these execution operations, and the effectiveness of the consequences of the execution operations, and conducts detailed analysis. Determine the accuracy of the attack feature matching between the system attack and the risk scenario, ensure the rationality of the risk assessment of the risk scenario, clarify the security of the automatic assessment of the risk response disposal strategy and the effective prevention of the information security attack by the output of the risk response disposal strategy without causing additional functional safety hazards. If an emergency security incident occurs, such as an error in the matching of the attack and risk scenario characteristics, a large error in the risk scenario risk assessment, an unreasonable risk response disposal strategy, or a serious threat to the industrial control system, the system can autonomously identify and control all operation behaviors, terminate the output of the risk response strategy, and notify the operator to provide necessary support for all related information, assessment information, and risk disposal strategy information within the system, and correct the situation of abnormal or emergency security incidents. The system and people form an associated response and closed-loop management on the loop, and people and the system are the same on the loop. In this mode, the system responds comprehensively to attacks, vulnerabilities, and data information, and provides a feedback interface to operate system-related information to ensure the correctness and effectiveness of all operation processes. When the correctness and effectiveness are not met or the system cannot provide an effective and reasonable risk response and disposal strategy, experts are introduced to conduct on-loop analysis and corrections.

[0092] When the strategy cannot repair the risk, timely adopt human-in-the-loop (HitL) optimization and human-on-the-loop (HotL) optimization, reserve corresponding optimization interfaces, and suppress the risk in time.

[0093] The embodiment of the present invention specifically reserves windows for human-in-the-loop (HitL) optimization and human-on-the-loop (HotL) optimization mechanisms, which can be centrally called to implement intelligent optimization of risk handling strategies when the requirements cannot be met in the strategy library or when risks cannot be responded to in a timely manner, such as Figure 2 shown.

[0094] like Figure 5 As shown, the present application also provides a risk management system 200 integrating functions and information security, including:

[0095] The risk scenario construction module 201 is used to construct various risk scenarios for enterprise production systems, business systems and information systems;

[0096] The risk indicator quantitative assessment module 202 is used to perform risk quantitative assessment on the information security and functional safety of the enterprise production system, business system and information system in each risk scenario, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain a dual safety fusion risk quantitative indicator;

[0097] The risk handling strategy generation module 203 is used to generate an information security risk handling strategy and a functional safety risk handling strategy based on risk scenarios according to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual safety fusion risk quantitative index, and generate a dual safety cross-fusion risk handling strategy after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, so as to obtain a risk handling strategy set based on risk scenarios;

[0098] The risk management module 204 is used to automatically orchestrate different risk management strategies in the risk management strategy set based on the risk scenario according to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual-safety fusion risk quantitative indicators in each risk scenario, generate an orchestrated risk management strategy, and respond to corresponding risks through the orchestrated risk management strategy.

[0099] In a specific implementation of the present application, the risk indicator quantitative assessment module 202 is used to perform a risk quantitative assessment of information security in each risk scenario from the perspectives of asset level assessment, business level assessment, vulnerability level assessment, attack level assessment, and information security impact results in the risk scenario; an asset function and business function failure node analysis algorithm is used to comprehensively analyze the asset function safety failure degree and the business function safety failure degree in the enterprise production system, business system, and information system, and then the asset function safety failure degree and the business function safety failure degree are quantified through quantitative indicators to complete the risk quantitative assessment of functional safety.

[0100] In a specific implementation of the present application, the risk indicator quantitative assessment module 202 is also used to comprehensively analyze the cross-integration risks of information security and functional safety, and adopts a dual-dimensional matrix of functional safety-information safety to integrate the information security risk quantitative assessment results and the functional safety risk quantitative assessment results to obtain a dual-safety fusion risk quantitative indicator.

[0101] In a specific implementation of the present application, the risk management module 204 also includes a risk management strategy automatic orchestration module, which is used to respond to different response demand indicators according to the requirements of the enterprise production system, business system and information system and perform continuous risk management strategy optimization calls.

[0102] like Figure 6 As shown, the risk management system 200 integrating functional and information security of the present application also includes a risk management strategy evaluation module, which is used to establish risk management strategy effectiveness evaluation indicators for all risk management strategies in the risk management strategy set; perform influencing factor indicator analysis on the degree of influence of all risk management strategies on functional safety, and establish dual-safety conflict influencing factor indicators for information security and functional safety of the risk management strategies; establish dual-safety conflict rationality indicators for information security and functional safety of the risk management strategies; and evaluate and verify the risk management strategies through the risk management strategy effectiveness evaluation indicators, the dual-safety conflict influencing factor indicators and the dual-safety conflict rationality indicators.

[0103] In a specific implementation of the present application, the risk disposal strategy evaluation module is used to establish risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies based on the security recovery degree; wherein the security recovery degree includes a recovery time objective and a recovery point objective; the recovery time objective is used to characterize the time it takes for the risk response disposal measures to restore the system and data or business functions from suspension to normal after an attack occurs, and the recovery point objective is used to characterize the time it takes for the risk response disposal measures to restore the system and data to normal after a risk occurs.

[0104] In a specific implementation of the present application, the risk management strategy evaluation module is also used to establish a code for the impact of the risk management strategy on functional safety and information security conflicts, and to establish a conflict code mechanism and conflict quantification indicators corresponding to the conflict code for different degrees of functional safety and information security conflict impact results.

[0105] like Figure 6 As shown, the risk management system 200 of the fusion function and information security of the present application also includes a risk management strategy optimization module, which is used to respond to corresponding risks through the arranged risk management strategy in the continuously running enterprise production system, business system and information system, and continuously monitor the effect of the risk response; according to the monitoring results, feedback analysis is performed based on the risk management strategy effectiveness evaluation index, the dual-security conflict impact factor index and the dual-security conflict rationality index, and continuous feedback optimization is performed on the arranged risk management strategy.

[0106] In a specific implementation of the present application, the risk management strategy optimization module is used to perform feedback closed-loop optimization on the orchestrated risk management strategy based on the human-in-the-loop and human-on-the-loop automated strategy response mechanisms if the orchestrated risk management strategy does not meet the risk management strategy effectiveness evaluation index, or the dual-safety conflict impact factor index, or the dual-safety conflict rationality index.

[0107] The embodiment of the present invention comprehensively considers the integration of functional safety and information security, provides quantitative functional safety and information security risk assessment results, and generates effective risk disposal strategies. In particular, it provides a disposal strategy arrangement mechanism for multiple risks in the continuous operation of enterprise production systems, business systems, and information systems, as well as optimizes risk disposal strategies under the integration of functional safety and information security, responds to high-risk vulnerabilities as quickly as possible, and guarantees the dual security attributes of functional safety and information security to the greatest extent.

[0108] In one embodiment, a computer device is provided, such as Figure 7 As shown, it includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the above-mentioned fusion function and information security risk handling method are implemented.

[0109] Specifically, the computer device may be a computer terminal, a server or a similar computing device.

[0110] In this embodiment, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program for executing the above-mentioned fusion function and information security risk handling method.

[0111] Specifically, computer-readable storage media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer-readable instructions, data structures, program modules or other data. Examples of computer-readable storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable storage media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0112] Obviously, those skilled in the art should understand that the modules or steps of the above-mentioned embodiments of the present invention can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, and optionally, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. In this way, the embodiments of the present invention are not limited to any specific combination of hardware and software.

[0113] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A risk management approach that integrates functional and information security, It is characterized in that include: Construct various risk scenarios for enterprise production systems, business systems and information systems; In each risk scenario, conduct risk quantitative assessments on the information security and functional safety of the enterprise's production systems, business systems, and information systems, respectively, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain dual-safety fusion risk quantitative indicators; According to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual safety fusion risk quantitative index, an information security risk disposal strategy and a functional safety risk disposal strategy based on risk scenarios are generated, and a dual safety cross-fusion risk disposal strategy is generated after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, so as to obtain a risk disposal strategy set based on risk scenarios; According to the information security risk quantitative assessment results, the functional safety risk quantitative assessment results and the dual-safety fusion risk quantitative indicators in each risk scenario, according to the set risk disposal strategy automatic arrangement mechanism, different risk disposal strategies are automatically arranged in the risk disposal strategy set based on the risk scenario, and the arranged risk disposal strategy is generated, and the corresponding risk is responded to through the arranged risk disposal strategy; The method further comprises: Establishing risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies in the risk disposal strategy set; Conduct influencing factor index analysis on the impact of all risk treatment strategies on functional safety, and establish the dual safety conflict impact factor index of the risk treatment strategy on information security and functional safety; Establish the rationality index of the risk management strategy for the dual security conflicts of information security and functional safety; Evaluate and verify the risk disposal strategy through the risk disposal strategy effectiveness evaluation index, the dual-security conflict impact factor index and the dual-security conflict rationality index; Wherein, risk disposal strategy effectiveness evaluation indicators are established for all risk disposal strategies in the risk disposal strategy set, including: Based on the security recovery degree, risk treatment strategy effectiveness evaluation indicators are established for all risk treatment strategies; wherein, the security recovery degree includes the recovery time objective and the recovery point objective; the recovery time objective is used to characterize the time after the attack occurs that the risk response treatment measures can make the system and data or business functions return to normal from suspension, and the recovery point objective is used to characterize the normal point state to which the risk response treatment measures can restore the system and data after the risk occurs; Establish the rationality index of the risk management strategy for information security and functional safety conflicts, including: Establish a code for the impact of the risk management strategy on the conflict between functional safety and information security, and establish a conflict code mechanism and conflict quantification indicators corresponding to the conflict code for the impact of different degrees of functional safety and information security conflicts.

2. The risk management method for integrating functions and information security according to claim 1, It is characterized in that Conduct risk quantitative assessments on the information security and functional safety of the enterprise's production systems, business systems, and information systems, including: Under each of the risk scenarios, conduct a quantitative risk assessment of information security from the perspectives of asset level assessment, business level assessment, vulnerability level assessment, attack level assessment, and the information security impact results based on the risk scenario; By adopting the asset function and business function failure node analysis algorithm, we comprehensively analyze the asset function safety failure degree and the business function safety failure degree in the enterprise production system, business system and information system, and then quantify the asset function safety failure degree and the business function safety failure degree through quantitative indicators to complete the quantitative risk assessment of functional safety.

3. The risk management method for integrating functions and information security according to claim 1, It is characterized in that The obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results are integrated to obtain the dual safety fusion risk quantitative indicators, including: Comprehensively analyze the cross-integration risks of information security and functional safety, adopt the functional safety-information security dual-dimensional matrix, integrate the quantitative assessment results of information security risks and functional safety risks, and obtain the quantitative indicators of dual safety integration risks.

4. The risk management method for integrating functions and information security according to claim 1, It is characterized in that The method further comprises: In the continuously running enterprise production system, business system and information system, respond to the corresponding risks through the arranged risk treatment strategy, and continuously monitor the effect of the risk response; According to the monitoring results, feedback analysis is performed based on the risk disposal strategy effectiveness evaluation index, the dual-safety conflict impact factor index and the dual-safety conflict rationality index, and continuous feedback optimization is performed on the arranged risk disposal strategy.

5. The risk management method for integrating functions and information security according to claim 4, It is characterized in that The method further comprises: If the orchestrated risk disposal strategy does not meet the risk disposal strategy effectiveness evaluation index, or the dual-safety conflict impact factor index or the dual-safety conflict rationality index, the orchestrated risk disposal strategy is subjected to feedback closed-loop optimization based on the human-in-the-loop and human-on-the-loop automated strategy response mechanisms.

6. A risk management system that integrates functions and information security, It is characterized in that include: Risk scenario building module, used to build various risk scenarios for enterprise production systems, business systems and information systems; The risk indicator quantitative assessment module is used to conduct risk quantitative assessment on the information security and functional safety of the enterprise's production system, business system and information system in each risk scenario, and then integrate the obtained information security risk quantitative assessment results and functional safety risk quantitative assessment results to obtain dual safety fusion risk quantitative indicators; A risk handling strategy generation module is used to generate an information security risk handling strategy and a functional safety risk handling strategy based on risk scenarios according to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual safety fusion risk quantitative index, and to generate a dual safety cross-fusion risk handling strategy after combining the enterprise's security requirements for functional safety and information security and determining the conflict between the two safety, so as to obtain a risk handling strategy set based on risk scenarios; A risk handling module is used to automatically arrange different risk handling strategies in the risk handling strategy set based on the risk scenario according to the information security risk quantitative assessment result, the functional safety risk quantitative assessment result and the dual-safety fusion risk quantitative index in each risk scenario, generate an arranged risk handling strategy, and respond to the corresponding risk through the arranged risk handling strategy; A risk disposal strategy evaluation module, used to establish risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies in the risk disposal strategy set; Conduct influencing factor index analysis on the degree of influence of all risk disposal strategies on functional safety respectively, establish the dual safety conflict influence factor index of the risk disposal strategy for information safety and functional safety; establish the dual safety conflict rationality index of the risk disposal strategy for information safety and functional safety; evaluate and verify the risk disposal strategy through the effectiveness evaluation index of the risk disposal strategy, the dual safety conflict influence factor index and the dual safety conflict rationality index; The risk disposal strategy evaluation module is used to establish risk disposal strategy effectiveness evaluation indicators for all risk disposal strategies based on the security recovery degree; the security recovery degree includes the recovery time objective and the recovery point objective; the recovery time objective is used to characterize the time after the attack occurs that the risk response disposal measures can make the system and data or business functions return to normal from suspension, and the recovery point objective is used to characterize the normal point state to which the risk response disposal measures can restore the system and data after the risk occurs; The risk management strategy evaluation module is also used to establish the code of the risk management strategy's impact on functional safety and information security conflicts, and to establish a conflict code mechanism and conflict quantification indicators corresponding to the conflict code for different degrees of functional safety and information security conflict impact results.

7. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, It is characterized in that When the processor executes the computer program, the fusion function and information security risk management method described in any one of claims 1 to 5 are implemented.

8. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores a computer program for executing the fusion function and information security risk handling method according to any one of claims 1 to 5.

Images