工业控制系统中有效的网络攻击检测方法
Piotr Marusak1, Robert Nebeluk1, Andrzej Wojtulewicz1
1Institute of Control and Computation Engineering, Faculty of Electronics and Information Technology, Warsaw University of Technology, 00-665 Warsaw, Poland.
Sensors (Basel, Switzerland)
|June 27, 2024
概括
本研究介绍了四种强大的方法来检测可编程逻辑控制器 (PLC) 和比例整合衍生 (PID) 控制器的网络攻击,以提高工业控制系统的安全性.
科学领域:
- 控制系统工程 控制系统工程
- 网络安全 网络安全
- 工业自动化 工业自动化
背景情况:
- 可编程逻辑控制器 (PLC) 在工业自动化中至关重要.
- 比例整合导数 (PID) 控制器广泛使用,但易受网络攻击的影响.
- 对控制系统的网络攻击可能导致严重的中断和安全风险.
研究的目的:
- 调查现实世界PLC系统中PID控制器的漏洞.
- 开发和评估有效的方法来检测控制算法的网络攻击.
- 提高工业控制系统的安全性和可靠性.
主要方法:
- 对控制器输出的控制信号完整性的验证.
- 检测异常输出变量变化,考虑到工厂动态.
- 使用重复控制器的参数来检测攻击.
- 在攻击检测中使用"黄金运行"进行基线比较.
主要成果:
- 研究了四种独特而有效的攻击检测方法.
- 这些方法易于实施,并且对各种攻击具有稳定性.
- 成功检测到对控制信号,输出变量和控制器参数的攻击.
- 在真实实验室控制工厂环境中证明有效.
结论:
- 提出的方法为PLC中的PID控制器提供了切实可行的解决方案.
- 实施这些检测技术可以显著提高工业控制系统的弹性.
- 检测网络攻击对于保持自动化流程的安全性和运营完整性至关重要.
相关概念视频
Distribution Reliability and Automation
107
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
107
Control Systems
1.1K
Control systems are everywhere in contemporary society, influencing diverse applications from aerospace to automated manufacturing. These systems can be found naturally within biological processes, such as blood sugar regulation and heart rate adjustment in response to stress, as well as in man-made systems like elevators and automated vehicles. A control system is essentially a network of subsystems and processes that collaboratively convert specific inputs into desired outputs.
At the heart...
At the heart...
1.1K
Gas Chromatography: Types of Detectors-II
359
In gas chromatography, different detectors are employed to meet specific analytical needs. These detectors are often categorized based on their detection mechanisms and the types of compounds they are best suited to analyze. Thermal Conductivity Detectors (TCD), Flame Ionization Detectors (FID), and Electron Capture Detectors (ECD) represent common categories, each with unique operating principles and applications. However, beyond these, several other detectors are designed for more specialized...
359
Feedback control systems
304
Feedback control systems are categorized in various ways based on their design, analysis, and signal types.
Linear feedback systems are theoretical models that simplify analysis and design. These systems operate under the principle that their output is directly proportional to their input within certain ranges. For instance, an amplifier in a control system behaves linearly as long as the input signal remains within a specific range. However, most physical systems exhibit inherent nonlinearity...
Linear feedback systems are theoretical models that simplify analysis and design. These systems operate under the principle that their output is directly proportional to their input within certain ranges. For instance, an amplifier in a control system behaves linearly as long as the input signal remains within a specific range. However, most physical systems exhibit inherent nonlinearity...
304
Zones of Protection
166
In power systems, the entire setup is divided into protective zones to isolate faults and protect the rest of the network. These zones include generators, transformers, buses, transmission lines, distribution lines, and motors. Each zone can be visualized as a separate room in a house, with each room protected by its own circuit breaker.
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
166
Radial System Protection
94
Radial systems employ time-delay overcurrent relays to reduce load interruptions. When a fault occurs, the nearest breaker opens first, while upstream breakers remain closed due to longer delay settings. This approach ensures minimal disruption to the rest of the system.
In a radial system with a fault downstream of the third breaker, ideally, only the third breaker will open, isolating the fault and interrupting the load connected beyond it. The second breaker has a longer delay setting,...
In a radial system with a fault downstream of the third breaker, ideally, only the third breaker will open, isolating the fault and interrupting the load connected beyond it. The second breaker has a longer delay setting,...
94


