The invention discloses an
industrial control system security protection capability assessment method and
system. The method comprises the following steps: acquiring key
chip models, operating systems, monitoring
software version information and service port information of n selected industrial control systems; the method comprises the following steps: acquiring a
vulnerability list under a decision-making layer index and a corresponding
threat value, constructing a fuzzy consistency judgment matrix from a target layer to a decision-making layer and from the decision-making layer to a scheme layer, performing fuzzy consistency
verification on the constructed judgment matrix, calculating the weight of the decision-making layer index for the matrix passing the consistency
verification, forming a weight matrix, and determining the
vulnerability list according to the weight matrix. The evaluation results of the safety protection capability of the selected n industrial control systems are calculated through a
fuzzy analytic hierarchy process, an analytic hierarchy model including hardware,
software, protocols and other multi-dimensional indexes is constructed,
vulnerability database retrieval and field
test data are combined, a quantitative
evaluation system is established through the
fuzzy analytic hierarchy process, and the safety protection capability of the industrial control systems is evaluated. The method has the advantages of improving evaluation index systematicness, realizing multi-dimensional safety factor quantitative analysis and improving
evaluation result objectivity.