Deep safety protection system and method for ship power control system

Abstract

The invention provides a deep security protection system and method for a ship power control system, and aims at the aspects of vulnerability scanning, security evaluation, event processing and protection and the like of the ship power control system. And a comprehensive ship power control system deep safety protection technology system is constructed in the aspects of network safety, terminal safety, system and application safety, personnel safety and the like. Technical protection is carried out on the security of the power control system by utilizing the technical means of isolation, monitoring and risk assessment, equipment access permission limitation, operation log auditing, operation access permission limitation, mobile medium admission, system security reinforcement, system vulnerability management, virus protection, intrusion prevention, application software permission management, backup and recovery and the like. The deep safety protection system of the ship power control system is optimized, and deep safety risks and problems of the ship power control system are prevented.

Description

Technical Field

[0001] The present invention belongs to the technical field of ship power control, and in particular relates to a deep safety protection system and method for a ship power control system. Background Art

[0002] The ship power control system has an important impact on the operational stability, reliability and safety of the ship. The ship power control system is usually composed of sensors, actuators, controllers, operator stations, control software, human-machine interface software, communication software, data management software, etc. The use environment of the ship power control system is an isolated environment, which is special, highly customized, frequently used, difficult to maintain, and highly important. At present, the degree of automation and informatization of ship power control systems is relatively high. For example, if the control software is damaged, problems such as issuing wrong control instructions and tampering with protection logic may occur, which may directly affect the operating stability, efficiency and safety of the power system's turbines, valves, pumps, electronic control equipment, etc., and may even lead to paralysis of the power system; the ship's power control system includes field I / O modules, buses, control stations, networks, operating software, control software, etc., involving a large amount of network communications, embedded software, databases, etc., which may have software vulnerabilities and face security issues such as viruses, information corruption, and espionage threats; the ship's power control system equipment is affected by complex marine environments such as swaying, vibration, salt spray, and electromagnetics; the ship's power control system integrates a large number of equipment, and the security conditions are poorer than those on land. Most of the equipment has maintenance interfaces set by the manufacturer. During the upgrade, debugging, and maintenance process, there are security risks such as input viruses, data tampering and destruction, and malicious control. Summary of the invention

[0003] In order to solve the technical problems in the prior art, the present invention provides a deep security protection system for a ship power control system. Aiming at the isolated use environment and fully digital technical characteristics of the ship power control system, the system is constructed based on four dimensions: ship power control software security, control hardware security, human factor security, and top-level security management.

[0004] Control software security refers to the security of control software such as power control system monitoring, control, communication, database, operating system, etc.;

[0005] Control hardware safety refers to the safety of power control system control, monitoring, communication equipment and facilities;

[0006] Human factor safety refers to the safety of people operating the system;

[0007] Top-level management safety refers to the operational management safety of top-level management, specifications, value concepts, etc. during the operation of the ship power control system.

[0008] Furthermore, control software security includes: ship power control system software security vulnerabilities, backdoors, system configuration, configuration defects, software viruses, etc. are all security threat factors; the control\interaction\communication\system and other software of the power control system cannot avoid the existence of security vulnerabilities and are easy to obtain system operation rights, and software viruses are spread and attacked based on system or software vulnerabilities; improper software configuration will also indirectly cause security vulnerabilities, such as incorrect address configuration, the existence of anonymous open ports, and lack of password security protection.

[0009] Furthermore, control hardware security includes: computing resource exhaustion, reliability, and physical failure issues of hardware such as network equipment, control equipment, and operating equipment. Security defects in hardware will affect system functions and software operating environment.

[0010] Furthermore, human factor safety includes: human error, intentional attack, malicious damage, operation and maintenance; error, unauthorized operation, error or bypassing of important security permissions are common security risks, hostile intentional attacks, and malicious damage by internal personnel; such as improper operator security configuration and arbitrary sharing of important operation permissions will directly affect the deep security of the power control system; the operating environment of the ship power control system is special, and there are a lot of testing and operation and maintenance work, such as functional testing and software upgrades, and there is a need to access test equipment and mobile media, including platform software encryption KEY mobile media, portable engineer stations, test tools, and external media access during the operation and maintenance upgrade process, which will leave security risks.

[0011] Furthermore, top-level management safety includes: safety management organization, safety management system, safety culture atmosphere, safety education and training; it mainly focuses on the lack of awareness of deep safety issues. For example, it is believed that the ship's power control system is isolated from the outside world and has its own technical system, which is safe, and that the outside world cannot attack or no one will attack the power control system. Fundamentally, they are not aware of the complexity of the power control system interface, the importance of safety, the safety risks faced and the harmful consequences; this directly leads to imperfect safety management measures, lack of management system norms, and no safety awareness.

[0012] The above-mentioned in-depth safety protection method for ship power control system includes:

[0013] System top-level safety management: First, strengthen the scientific management of the deep safety of the ship power system at the top level;

[0014] Overall security architecture: Establish an overall security architecture from the aspects of strategy, mechanism, supervision, and audit;

[0015] Security protection technology system, from the aspects of ship power control system vulnerability scanning, security assessment, event handling and protection, to build a comprehensive ship power control system in-depth security protection technology system for network security, terminal security, system and application security, personnel safety, etc., to deal with in-depth security issues;

[0016] Comprehensive attack and defense drills simulate attacks and conduct security defense drills on ship power control systems from the attacker's perspective to identify problems in management, strategy, technology, personnel, etc.

[0017] Furthermore, the top-level safety management of the system specifically includes: establishing a top-level safe operating environment from the aspects of safety management organization construction, management system formulation, safety culture atmosphere cultivation, professional safety education and training; establishing professional organizations with institutional norms to manage and constrain the operation process of the power control system, and regularly provide professional education and training for operators to improve safety awareness and professional quality; in terms of safety publicity and cultural construction, let control system operators realize that safety threats are everywhere, and strengthen moral monitoring and supervision of safety behaviors; in order to deal with the deep safety risks in the safety management of ship power control systems.

[0018] Furthermore, the overall system security architecture method specifically includes: the overall security strategy is the overall plan and strategy for deploying security protection technology to guide deep security protection work; the security mechanism is the specifications, mechanisms and guidance of various security protection work designed based on the overall strategy, which specifically guides deep security protection work, such as operating specifications, log management specifications, important area access permission mechanisms, important storage data backup and recovery mechanisms, disaster recovery mechanisms, harmful data and virus prevention mechanisms; supervision and auditing is the monitoring and supervision of deep security work, and the audit of various security work tasks, permissions, and results to ensure that deep security work can be carried out.

[0019] Furthermore, the system security protection technical methods specifically include:

[0020] isolation;

[0021] Monitoring and risk assessment;

[0022] Device access permission restrictions;

[0023] Run log audit;

[0024] Operational access rights restrictions;

[0025] Mobile media access;

[0026] System security reinforcement;

[0027] System vulnerability management;

[0028] Virus protection;

[0029] Intrusion prevention;

[0030] Application software permission management;

[0031] Backup and restore.

[0032] Furthermore, the comprehensive system security attack and defense drill specifically includes: collecting component configuration information of the ship power control system, combining it with the vulnerability standard library, and conducting a comprehensive vulnerability analysis to obtain system weakness information of the control system; obtaining the attack simulation path connection elements based on the control system topology and other information; combining the elements with the control capabilities of the control system as the input for establishing vulnerability exploitation rules; constructing a mapping between attack preconditions and attack results through the use of rules; finally, the attack simulation is visualized and output in a graphical manner, and the attack path sequence is described in a graphical form as a deep security attack behavior of the system from an attack perspective, and a comprehensive security attack and defense drill is conducted; through the safe conduct of a comprehensive security attack and defense drill, problems in the management, strategy, technology, personnel, etc. of the ship power control system are discovered; and the deep security protection system of the ship power control system is optimized.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] The present invention can provide multi-dimensional and in-depth safety protection for a ship power control system. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a deep safety protection system for the ship power control system of the present invention;

[0036] Figure 2 It is a deep safety protection method for a ship power control system of the present invention;

[0037] Figure 3 It is a system-wide in-depth security attack and defense drill based on an attack perspective of the present invention. DETAILED DESCRIPTION

[0038] In order to enable those skilled in the art to better understand the technical solution of the present invention, the present invention is further described below in conjunction with the accompanying drawings and specific implementation methods.

[0039] This application proposes a deep safety protection system and method for a ship power control system, which are as follows:

[0040] 1. In-depth safety protection system for ship power control systems

[0041] In view of the isolated use environment and fully digital technical characteristics of the ship power control system, a deep security protection system for the power control system is constructed based on the four dimensions of ship power control software security, control hardware security, human factor security, and top-level security management. Figure 1 shown.

[0042] Among them, top-level management safety refers to the top-level management, norms, value concepts and other operational management safety during the operation of the ship power control system. It includes safety management organization, safety management system, safety culture atmosphere, safety education and training, etc. It is mainly aimed at the lack of awareness of deep safety issues. For example, it is believed that the ship power control system is isolated from the outside world and is a self-contained technical system, which is safe, and the outside world cannot attack or no one will attack the power control system. From the root, it is not aware of the complexity of the power control system interface, the importance of safety, the safety risks faced and the harmful consequences. It directly leads to problems such as imperfect safety management measures, lack of management system norms, and lack of safety awareness.

[0043] Control software security refers to the security of control software such as power control system monitoring, control, communication, database, operating system, etc. Ship power control system software security vulnerabilities, backdoors, system configuration, configuration defects, software viruses, etc. are all security threat factors. The control, interaction, communication, system and other software of the power control system cannot avoid the existence of security vulnerabilities, and it is easy to obtain system operation rights, and software viruses are spread and attacked based on system or software vulnerabilities. Improper software configuration can also indirectly cause security vulnerabilities, such as incorrect address configuration, anonymous open ports, and lack of password security protection.

[0044] Control hardware safety refers to the safety of power control system control, monitoring, communication equipment and facilities. It includes computing resource exhaustion, reliability, physical failure and other issues of hardware such as network equipment, control equipment and operating equipment. Hardware safety defects will affect system functions and software operating environment.

[0045] Operator safety refers to the safety of system operators. It includes misoperation, intentional attacks, malicious damage, operation and maintenance, etc. Misoperation, unauthorized operation, misoperation or bypassing of important security permissions are common security risks, hostile intentional attacks, and malicious damage by internal personnel. If the operator's security configuration is improper and important operating permissions are shared at will, it will directly affect the deep security of the power control system. The operating environment of the ship's power control system is special, and there are a lot of testing, operation and maintenance work, such as functional testing and software upgrades. There is a need to access test equipment and mobile media, including platform software encryption KEY mobile media, portable engineer stations, test tools, and external media access during operation and maintenance upgrades, which will leave security risks.

[0046] 2. In-depth safety protection methods for ship power control systems

[0047] Deep security protection is carried out from four levels: top-level security management of ship power control system, overall security architecture, security protection technology system, and comprehensive attack and defense drills. Figure 2 shown.

[0048] 1) System top-level security management method

[0049] First, we should strengthen the scientific management of the deep safety of the ship power system in the top-level management. We should establish a top-level safe operation environment from the aspects of safety management organization construction, management system formulation, safety culture atmosphere cultivation, professional safety education and training. We should establish a professional organization with institutional norms to manage and constrain the operation process of the power control system, and regularly provide professional education and training for operators to improve safety awareness and professional quality. In terms of safety publicity and cultural construction, we should let the control system operators realize that safety threats are everywhere, and strengthen the moral supervision and supervision of safety behaviors. This is to deal with the deep safety risks in the safety management of ship power control systems.

[0050] 2) System security overall architecture method

[0051] Establish an overall security framework from the aspects of strategy, mechanism, supervision, and audit. The overall security strategy is the overall planning and strategy for deploying security protection technology to guide the deep security protection work; the security mechanism is the specifications, mechanisms and guidance of various security protection work designed based on the overall strategy, which specifically guides the deep security protection work, such as operation specifications, log management specifications, access permission mechanism for important areas, backup and recovery mechanism for important storage data, disaster recovery mechanism, harmful data and virus prevention mechanism, etc. Supervision and auditing are the monitoring and supervision of deep security work, and auditing of various security work tasks, permissions, and results to ensure that deep security work can be carried out.

[0052] 3) System security protection technology methods

[0053] From the aspects of ship power control system vulnerability scanning, security assessment, event handling and protection, we build a comprehensive ship power control system deep security protection technology system for network security, terminal security, system and application security, personnel safety, etc. to deal with deep security issues.

[0054] (1) Isolation. In the ship power control system, information isolation between the safety system and the non-safety system should be carried out, and the power control system should be isolated from other information systems. By using devices such as gateways, it is ensured that the information of the safety-level control system can only be transmitted to the non-safety-level system in one direction, and the information interaction between other information systems and the power control system does not affect the safety protection function.

[0055] (2) Monitoring and risk assessment. Real-time monitoring of the network traffic, network load, and network delay of the ship power control system is carried out to assess and promptly warn of possible security risks such as network storms, data packet loss, delay, and disorder.

[0056] (3) Equipment access permission restrictions. Restrictions are imposed on equipment accessing the ship power control system network, and access principles are implemented. Port binding is performed on equipment accessing the power control system network, and idle ports are closed; new equipment access is performed, and port access is allowed only after confirming that the access equipment does not affect safety.

[0057] (4) Operation log audit. Effective audit tracking is implemented for important operations and processes of the power control system network to discover abnormal safety operation processes. The system data, program and file operation and processing processes are monitored, and the log records are complete, timely and effective. The logs are professionally reviewed, and abnormal records are tracked and processed.

[0058] (5) Restriction of operation access rights. Set operation access rights for the system's terminals, equipment, and information, and restrict operation access levels. Minimize the scope of operation access rights for important terminals, equipment, and information. Restrict operation access by external and irrelevant personnel. For example, use system passwords and other means to manage permissions.

[0059] (6) Mobile media access. During the onshore joint commissioning, navigation test and operation and maintenance phase of a ship, there is a possibility that a large number of external CDs, USB flash drives, hard drives, software encryption keys and other mobile media will be connected to the terminal. External media are prone to carry Trojans, viruses and other information, and their safety cannot be guaranteed after access. It is necessary to restrict the access to mobile media and close the idle USB, R485 and other media interfaces of the terminal. The access media needs to be approved and checked. After ensuring safety, the terminal interface is opened to allow access to the media.

[0060] (7) System security reinforcement. Strengthen the security of important equipment such as the power control system host and server. Provide security protection for system login accounts, system file protection, system process protection, system permission monitoring, etc. Prevent the arbitrary addition, deletion, and modification of system login accounts, deletion, modification, and destruction of system files, display and protection of processes, system shutdown prevention, time tampering prevention, etc., and prevent all kinds of sensitive data from being leaked, spread, or lost intentionally or unintentionally.

[0061] (8) System vulnerability management. Scan the terminal system for vulnerabilities, discover vulnerabilities and manage patches. The vulnerability management of ship power control systems requires full and complete testing and experimentation of vulnerability patches, and even review; for some power control system embedded device vulnerabilities, customized patches need to be developed. In particular, for vulnerability patches that require a reboot, a patch plan and emergency record need to be developed to ensure that the vulnerability patch does not affect the normal operation of the power control system.

[0062] (9) Virus protection. At present, due to the problems of conventional antivirus tools occupying terminal computing resources and mistakenly killing software components, unexpected control interruptions may occur; the virus database is updated slowly and has a lag, and can only protect against known characteristic viruses. Customized virus protection tool software is developed for ship power control systems, and sufficient testing is required to ensure that it has virus protection capabilities without affecting the normal operation of the power control system platform.

[0063] (10) Intrusion prevention. If a ship's power control system is maliciously invaded and tampered with by hackers or hostile forces, the system data will be at risk of being destroyed. Firewall intrusion detection technology can be used to check the data packet information transmitted on the network, promptly detect threatening access, discover behaviors that violate security policies in the network or system, predict signs of attacks, and promptly warn and prevent them.

[0064] (11) Application software authority management. A large number of application software in the ship power control system is also an important safety risk factor. The application software must also be given authority and managed, and the corresponding application authority must be defined through user accounts, passwords, etc., and authority management must be performed using passwords and other means.

[0065] (12) Backup and recovery. Back up the ship power control system configuration files, historical data, control algorithms, function block parameters, event records and other data. This includes the operating system, database, data information, important software functions, audit records and important hardware functions, etc., to cope with particularly severe situations.

[0066] 5) Comprehensive system security attack and defense drills

[0067] System in-depth security attack and defense drill based on attack perspective

[0068] Conduct attack simulations and security drills on ship power control systems from the attacker's perspective to identify problems in management, strategy, technology, personnel, etc. Figure 3As shown. For the ship power control system, the component configuration information is collected, combined with the vulnerability standard library, and the system weakness information of the control system is obtained through comprehensive vulnerability analysis; according to the control system topology and other information, the attack simulation path connection elements are obtained; the control capabilities of the elements and the control system are combined as the input for establishing vulnerability exploitation rules; through the use of rules, the mapping between attack preconditions and attack results is constructed. Finally, the attack simulation is visualized and output in a graphical way, and the attack path sequence is described in a graphical form as a system-based deep security attack behavior from an attack perspective, and a comprehensive security attack and defense drill is carried out. Through the safe implementation of a comprehensive security attack and defense drill, problems in the management, strategy, technology, and personnel of the ship power control system are discovered. The deep security protection system of the ship power control system is optimized.

[0069] In summary, the above are only preferred embodiments of the present invention, and the protection scope of the present invention is not limited thereto. All equivalent changes and modifications made according to the patent scope of the present invention and the contents of the specification are within the scope covered by the patent of the present invention.

Claims

1. A deep safety protection system for a ship power control system, characterized by: Aiming at the isolated use environment and fully digital technical characteristics of ship power control systems, it is constructed based on four dimensions: ship power control software security, control hardware security, human factor security, and top-level security management; Control software security refers to the security of control software such as power control system monitoring, control, communication, database, operating system, etc.; Control hardware safety refers to the safety of power control system control, monitoring, communication equipment and facilities; Human factor safety refers to the safety of the people operating the system; Top-level management safety refers to the operational management safety of top-level management, specifications, value concepts, etc. during the operation of the ship power control system.

2. The system according to claim 1, characterized in that Control software security includes: ship power control system software security vulnerabilities, backdoors, system configuration, configuration defects, software viruses, etc. are all security threat factors; the control\interaction\communication\system and other software of the power control system cannot avoid the existence of security vulnerabilities and are easy to obtain system operation rights, and software viruses are spread and attacked based on system or software vulnerabilities; improper software configuration will also indirectly cause security vulnerabilities, such as incorrect address configuration, the existence of anonymous open ports, and lack of password security protection.

3. The system according to claim 1, characterized in that Control hardware security includes: computing resource exhaustion, reliability, and physical failure issues of hardware such as network equipment, control equipment, and operating equipment. Security defects in hardware will affect system functions and software operating environment.

4. The system according to claim 3, characterized in that Human factor safety includes: human error, intentional attack, malicious damage, operation and maintenance; error, unauthorized operation, error or bypassing of important security permissions are common security risks, hostile intentional attacks, malicious damage by internal personnel; improper operator security configuration, arbitrary sharing of important operation permissions, etc. will directly affect the deep security of the power control system; the operating environment of the ship power control system is special, and there are a lot of testing, operation and maintenance work, such as functional testing, software upgrades, and access to test equipment and mobile media, including platform software encryption KEY mobile media, portable engineer stations, test tools, and external media access during the operation and maintenance upgrade process, which will leave security risks.

5. The system according to claim 4, characterized in that Top-level management safety includes: safety management organization, safety management system, safety culture atmosphere, safety education and training; it mainly targets the lack of awareness of deep safety issues. For example, it is believed that the ship's power control system is isolated from the outside world and has its own technical system, which is safe, and that the outside world cannot attack or no one will attack the power control system. Fundamentally, they are not aware of the complexity of the power control system interface, the importance of safety, the safety risks faced and the harmful consequences; this directly leads to imperfect safety management measures, lack of management system norms, and no safety awareness.

6. The method for in-depth safety protection of a ship power control system according to any one of claims 1 to 5, characterized in that: include: System top-level safety management: First, strengthen the scientific management of the deep safety of the ship power system at the top level; Overall security architecture: Establish an overall security architecture from the aspects of strategy, mechanism, supervision, and audit; Security protection technology system, from the aspects of ship power control system vulnerability scanning, security assessment, event handling and protection, to build a comprehensive ship power control system in-depth security protection technology system for network security, terminal security, system and application security, personnel safety, etc., to deal with in-depth security issues; Comprehensive attack and defense drills simulate attacks and conduct security defense drills on ship power control systems from the attacker's perspective to identify problems in management, strategy, technology, personnel, etc.

7. The method according to claim 6, characterized in that The top-level safety management of the system specifically includes: establishing a top-level safe operating environment from the aspects of safety management organization construction, management system formulation, safety culture atmosphere cultivation, professional safety education and training; establishing a professional organization with institutional norms to manage and constrain the operation process of the power control system, and regularly provide professional education and training for operators to improve safety awareness and professional quality; in terms of safety publicity and cultural construction, let the control system operators realize that safety threats are everywhere, and strengthen the moral monitoring and supervision of safety behaviors; in order to deal with the deep safety risks in the safety management of ship power control systems.

8. The method according to claim 6, characterized in that The overall system security architecture method specifically includes: the overall security strategy is the overall plan and strategy for deploying security protection technology to guide deep security protection work; the security mechanism is the specifications, mechanisms and guidance of various security protection work designed based on the overall strategy, which specifically guides deep security protection work, such as operating specifications, log management specifications, important area access permission mechanisms, important storage data backup and recovery mechanisms, disaster recovery mechanisms, harmful data and virus prevention mechanisms; supervision and auditing is the monitoring and supervision of deep security work, and the audit of various security work tasks, permissions, and results to ensure that deep security work can be carried out.

9. The method according to claim 6, characterized in that The technical methods for system security protection specifically include: isolation; Monitoring and risk assessment; Device access permission restrictions; Run log audit; Operational access rights restrictions; Mobile media access; System security reinforcement; System vulnerability management; Virus protection; Intrusion prevention; Application software permission management; Backup and restore.

10. The method according to claim 6, characterized in that The comprehensive system security attack and defense drill specifically includes: collecting component configuration information of the ship power control system, combining it with the vulnerability standard library, and conducting a comprehensive vulnerability analysis to obtain system weakness information of the control system; obtaining the attack simulation path connection elements based on the control system topology and other information; combining the elements with the control capabilities of the control system as the input for establishing vulnerability exploitation rules; building a mapping between attack preconditions and attack results through the use of rules; finally, the attack simulation is visualized and output in a graphical manner, and the attack path sequence is described in a graphical form as a system-wide deep security attack behavior from an attack perspective, and a comprehensive security attack and defense drill is conducted; through the safe conduct of a comprehensive security attack and defense drill, problems in the management, strategy, technology, personnel, etc. of the ship power control system are discovered; and the deep security protection system of the ship power control system is optimized.

Images