(1 State Key Laboratory of Robotics, Shenyang Institute of Automation, Chinese Academy of Sciences, Shenyang 110016, China; 2 Key Laboratory of Networked Control Systems, Chinese Academy of Sciences, Shenyang 110016, China; 3 Institutes for Robotics and Intelligent Manufacturing, Chinese Academy of Sciences, Shenyang 110169, China; 4 University of Chinese Academy of Sciences, Beijing 100049, China)
Abstract： With the rapid development of industrial wireless networks, security incidents are constantly emerging, and network survivability has become one of the focuses of attention in this field. This paper focuses on the security issues in industrial wireless networks, and takes attack intention as the starting point to conduct research on the evaluation of the resilience of industrial wireless networks. Firstly, by analyzing known attack cases, multiple types of attacks and their potential impacts are identified. Then, different from existing evaluation methods for the characteristics of network systems themselves, a comprehensive survivability evaluation method is constructed by taking into account the potential intent of the attack. Finally, on an industrial wireless network system model, by comparing it with existing popular network system survivability evaluation methods, it is found that the proposed attack intent based industrial wireless network survivability evaluation method in this paper has a more objective and stable evaluation effect.
Key words : attack intention; security risk measurement; Industrial Internet of Things; security threat
引言
當下，工業(yè)網絡（Industrial Wireless Internet）作為先進制造業(yè)的核心，已經廣泛應用于工廠自動化、供應鏈管理、設備監(jiān)測等領域［1-3］。然而，隨著工業(yè)物聯網（Industrial Internet of Things,IIoT）技術的迅猛發(fā)展，安全問題逐漸浮現，成為制約其進一步發(fā)展的主要瓶頸之一。工業(yè)物聯網系統(tǒng)中涉及的大量設備、傳感器和網絡架構，為潛在的攻擊者提供了可乘之機，可能導致生產中斷、數據泄露、設備損壞等嚴重后果。工業(yè)物聯網中常見的安全威脅包括［4-8］：（1）設備漏洞和弱點：IIoT系統(tǒng)中的設備和傳感器可能存在未修補的漏洞和弱點，攻擊者可以利用這些漏洞來獲取非法訪問、控制設備，或者干擾設備正常運行。（2）惡意軟件和病毒： 攻擊者可以通過惡意軟件和病毒感染IIoT系統(tǒng)，從而損壞設備、竊取數據或干擾生產流程。（3）網絡攻擊： IIoT系統(tǒng)的網絡通信可能受到各種網絡攻擊，如DDoS（分布式拒絕服務）攻擊、入侵、劫持等，從而導致網絡不穩(wěn)定或癱瘓。（4）供應鏈攻擊： 攻擊者可能通過操縱供應鏈中的元件或設備，在制造過程中引入惡意代碼或漏洞，從而影響整個生產流程和產品質量。
